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1. INTRODUCTION 


A study of LM Related Systems has been conducted by NASA and GAC in support 
of the Apollo -13 Investigation; this report summarizes the results of that 
study. Infonnation is presented on the foUoving subsystem elements for 
both the descent and ascent stages: 

o Propulsion and Reaction Control propellant and pressurant tanks 
o Oxygen tanka 
o Water tanks 
o Batteries * 

The following major elements comprise the oveiall study: 
o Compilation of basic system descriptive data 
o Investigation of all line and system components that could 
potentially initiate a failure mode similar to that believed 
to have occiirred on Apollo 13 

o Evaliiation of non-metallic materials that are in contact, or 

could come in contact, with nitrogen tetroxide (NgOj^), Aerozine- 
50 (A-50) or oxygen; some consideration was also given to the possible 
effects of potassium hydroxide (KDH) spillage from batteries 
o Compilation of burst test histoiy on all IM pressure vessels, and 
determination of the anticipated failxire modes in flight 
o Computation of the TNT equivalency for each pressure vessel as a 
function of mission time, and an evaliaation of the damage potential 
from each tank for both explosive and non-explosive failures 
o Development of conclusions from the above efforts and recommendations 
for further action. 


1-1 



2. SYSTEMS DESCRIPTION 


2.1 SUMMMIY 

The IM pressure vessels are located in the Descent Propulsion Subsystem (DPS), 
Ascent Propulsion Subsystem (APS), Reaction Control Subsystem (RCS) und 
Envlroimental Control Subsystem (ECS). The IM batteries sre located in the 
Electrical River Subsystem (EPS) and the Explosive Devices Subsystem (EDS) . 

Table 2.1-1 sumarizes the design parameters of each of the IM pressure 
vessels and batteries. 

Ihe DPS contains four propellant tanks, a supercritical helium tank and an 
ambient helium tank. Figures 2.1-1, 2.1-2, and 2.1-3 shov Isometric views 
of the relative location of the DPS components with respect to the descent 
stage structure. In the IM-10 and sub^quent configuration, the propellant 
tanks were lengthened. A discussion of mechanical failures which could 
cause pressure vessel rupture is included in Ihra. 2.2. 

Two propellant tanks and two ambient helium storage tanks are Included In 
the APS. Isometric views of the relative position of APS components with 
respect to the ascent stage structure are shown in Figures 2.1-U and 2.1-5. 

A mechanical failure mode that could cause an APS pressure vessel rupture is 
discussed in Ihra. 2.3> 

The RCS configuration consists of four propellant and two ambient helium tanks 
arranged in two identical modules. Figure 2.1-6 shows an isometric view of the 
relative location of the RCS components with respect to the ascent stage 
structure. There are no single or double point mechanical failures of the RCS 
system ^hlch would lead to an overpressure condition. 

IM-8 and IM-9 SCS oxygen and water sections are composed of three oxygen tanks 
and three water tanks, two of each are in the ascent stage and the remaining 
tanks are in the descent stage. Isonetric views of the relative position of ECS 
components with respect to the descent stage and ascent stage structures are 
shown in Figures 2.1-3, 2.1-7, 2.1-8 and 2.1-9- For reference purposes the 
ascent stage primary and secondaiy coolant loops are shown in Figures 2.1-10 and 
2.1-11, respectively. In the LM-10 and subsequent configuration an additional 
oxygen tank and water tank are added to the descent stage. There are no single 
or double point mechanical failures of the ECS system ^Ailch would lead to an 
overpressure condition. 
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2*1 cont'd 


The EPS batteries are the ascent and descent primary batteries, and the EDS 
batteries are the ascent and descent ED batteries. Figures 2.1-3, 2.1-5 and 
2.1-12 show Isometric views of EPS and EDS components relative to the descent 
and ascent stinictures. 
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TABLE 2 . 1^1 
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DIMEKSIOrS 

TAIIK CAFACiry 
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Figure 2.1-6 Ascent Stage ECS Oxygen Section 
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Figure 2.1-9 Ascent Stage ECS Water Section 
















Figure 2.1-12 
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2.2 DESCENT PROPULSION SUBSYSTEM 


The DPS, shown schematically in Figure 2.2-1, incorporates the ambient helium 
start tank. Figure 2.2-2; the supercriticeJ. helium (SHe) tank. Figure 2.2-?; 
and four propellant tanks. Figure 2.2-4. The two fuel tanks and two oxidizer 
tanks have similar internal and external configurations and are located in 
the ±Z bays (oxidizer) and ±Y bays (fuel) of the descent stage cruciform 
structure. The propellant tanks in the IM-10 and subsequent configuration 
were extended by increasing the length of the cylindrical section of the tanlis. 
The balance lines were deleted euid orifices were placed in the branch lines 
leading to the feed lines. The ambient and supercritical helium tanks are 
located in Quad III. Figure 2.2-5 is a photograph showing the supercritical 
and eunbient helium tanks installed in the descent stage (bottom and upper 
right tanks). 

For the purpose of identifying candidate con 5 )onents to investigate, it was 
assumed in this study that propellant emd propellant «ra,pors do not penetrate 
the system upstream of the reducing valve. The reducing valves are located 
downstream of the helium solenoid shut-off vales and upstream of the quad 
check valves. During pre-mission operations the vapors and propellants are 
isolated to that section of the system downstream of the compatibility squib 
valves. Actuation of the system requires that these valves be opened (fired) 
to permit helium flow from the helium tanks, through regulators and check 
valves, and into the propellant tanks. Helium pressure in these tanks causes 
propellsmt flow to the engine valves which are opened hydraulically after fuel 
is directed to the actuators by the pre-valve and the solenoid pilot valves. 

In the IM-7 configuration an orificed heat exchanger bypass line is included 
to prevent pressure build up in the fuel feed line, because of neat soakback 
after freezing fuel in the heat exchanger following lunar venting. In addition. 
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2.2 (cont'd) 


the oxidizer fill vent «fas moved from Quad IV to the +Z 8l bulkhead for access- 
ibility and three oxidizer disconnects (lower deck Quad IV), system high point 
blefd, engine high point bleed and engine low point drain were moved out to the 
heat shield beam in Quad IV for better accessibility. 

The SHe tank is a vacuum-jacketed pressure vessel designed to a heat leak 
pressure rise rate not to exceed 10 psi per hour. In a nominal mission, tank 
pressure is reduced by venting on the lunar surf&ce throu^ the lunar 
dun^} system. Emergency venting of SHc tank over-pressure is throu^ the dual 
burst disc assembly. Over-pressure ruptures both burst discs thereby venting the 
tank. It has been shown that the pressure rise effects of a "thermal short" of 
the SHe tank vacuum insulation are adequately handled by the burst dice assembly. 
No propellants or propellant vapors reach the tank assembly euid all materials, 
metallic and non-metal lie, are conqiatible %rith helium. Two pressure transducers 
eure provided in a line fnmthe SHe tank; the output from one is re' at on a 
cabin meteq tdiile the output ftoo the other is transmitted throu*-.. cte PCM to 
the ground. 

The ambient helium start tank is isolated from the pressurization system by a 
squib valve. 

- During pre-mission operations no venting means are provided after 
engine firing, the tank is vented throu^ the regulators into the propellant 
tanks. In the IM-IC and subsequent configuration, zis a result of the extended 
propellant tanks, the helium line; on the top deck were reconfigured and the 
ambient helium line on the -Z top deck was moved inboard to place it under the 
fiberglass heat shield. The anhient helium start tank pressure is monitored 
by a pressure transducer in the line downstream of the tank. The output signal 
goes to both a cabin display and to the PCM. 

Each pair of propellant tanks is protected from over-pressure by a burst disc 
and relief valve assembly. The burst disc function is to protect the relief 
valves from the propellant vapors which have proven to be compatibility sens- 
itive for long duration exposure periods. Burst disc rupture pressure is 
nominally 5 psi higher than the relief valve pressure, 275 psid maximum. 
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2,2 (cont'd) 

Figure 2.2-U shows the internal configuration of the propellant tank, and de- • 
tails of the tank bottom shoving the relation of the bulk temperature probe and 
the propellant quantity gaging system to the non-electrical components within 
the tank. Other electrically operated cocponents within the DPS downstream of 
the regulators, which could provide a propellent/electrical interface in a 
failure mode, are the ullage and interface pressure transducers, craipatibilily 
and lunar dump squibs, lunar dump and engine solenoid valves,and fuel pre-valve. 

The transducers are essential parts of the fli^t instrumentation and ajre 
critical in the evaluation of the DPS operation during the lunar mission. Two 
pressure transducers (redundant) are included in the line just downstream of 
the regulators to monitor the regulator outlet pressure. The redundancy is 
required because of the importance of the regulated pressure with respect to 
the propellant tanks. 

The ullage transducers sure located in the helium lines upstresun of the propellsuit 
tsLnks; the interface transducers are located downstream of the tanks in the feed 
lines near the engine interface. The squib valves isolate propellants and pro- 
pellant vapors by psurent-metal membranes until opened instsmtsuieously by eiqolosive- 
ly severing the membrsuies. No electrical power is brought to the valves before 
or after operation, but only during the instant of detonation of the explosive 
chsurges . 

Ihe lunsur dump solenoid valves are used to control the duration of venting 
after the lunar dump squib valves are opened. !Ihey sure isolated from pro- 
pellants suid propellant vapors until the lunar dump mode is activated by the 
squib vsl.ves. They are flown latched open suid are not activated closed until 
pressure in the propellant t anks hsis been greatly reduced. The lunar dump squib 
valves and solenoid valves are located upstream of the propellsmt tanks parallel 
to the relief vsilves smd burst discs in both the oxidizer and fuel sections. In 
the M-10 suid subsequent configuration the lunar dump helium vent ports were re- 
located to allow for structural changes to incorporate the extended propellsmt 
tanks. 
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,2.2 '(oont'd) 


In the DPS, the pre-valves are part of the descent engine assembly and are 
located downstream of the engine interface. When opened they expose the 
engine solenoid pilot valves, located further downstream, to pressurized 
fuel. Opening of the solenoid pilot valves exposes the ball valve actuators 
to the pressurized fuel. 

The following paragraphs describe conditions where fewer than three mechanical 
failures could cause pressure vessel rupture. 

Mixing of hypergolics could cause an overpressure condition in the oxidizer 
tank or, in a worst case, an explosion. This condition can be caused by only 
one failure, internal leakage of the fuel/SHe heat exchanger. Fuel could 
leak into the helium system via the external heat exchanger, depending on the 
relative pressures of the fuel and helium sections downstream of the SHe 
squib valves prior to the descent engine firing. Fuel could be introduced into 
the common helium manifbld ^Ich feeds the oxidizer tanks and cause the over- 
pressure condition. 

A failure of this type occurred during DVT testing in I966 (IBW06). There W2is 
a crack at the weld joint between the fuel collector and the side panel during 
vibration. The failure was caused by lack of adequate internal support at 
the mounting location, stress concentration and flexure of side panels. This 
problem was resolved by increasing the panel thickness, adding external stiff- 
eners and redesigning the weld. 

A double failure of a quad check valve ;uin be postulated in the DPB or APS 
which could lead to hypergolic propellj-?. mixing. It requires two poppets in 
series in either valve to fail open a>'d thereby provide a flow path for 
either propellant. In addition, the potentisd. for liquid flow must be estab- 
lished via either a temperature or pressure gradient and liquid must be 
simultaneously positioned at the helium diffuser to be forced into the helium 
lines. Given these conditions ir ssriicient quantity emd an additional 
condition of a relatively 1 ullage volume, it is possible to theorize a 
situation whereby a volume of one propellant cc Id be swept into the opposite 
propellant tanks during a subsequent period of pressurant flow, ^ich could result 
ia a catastrophic pressure spike in the tank where the mining took place. 
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2.2 (ccMit'd) 


if the proi>ellant being transferred in the above exan^jle were in the vapor 
phase rather than liquid, the reaction in the opposite tank would be much 
less violent. In the worst case it is expected that the relief system of 
the propellant tank would be capable of relieving any pressure spike from 
a pinDpellant vapor transfer. 

There have been numerous leakage failures (ranging from just-out-of-specifi- 
cation to full-open conditions) on the quad check valves. The test specification 
for leak checking quad check valves at GAC is 100 sec/hr max allowable leak- 
age per element and valve assembly with 8 to 10 psid reverse pressure applied. 

The specification is the same for KSC testing except for a recent change 
which allows single element leakage of 300 scc/hr as long as the element in 
series is 100 scc/hr maximum, i.e., the valve assembly shall not exceed 
100 scc/hr. Each occurrence is presently evaluated to determine rtiether the 
unit is rejected or the condition is waived. The propellant tanks can also 
rupture as a result of the following two failure combinations. The first 
combination of failures involves a hi^ pressure helium leak, after descent 
engine firing, from the supercritical He section into the fuel section via the fuel/ 
SHe heat exchanger and the fuel tank relief valve to fail closed. The failure 
history on the fuel/SHe heat exchanger was discussed above. Two experiences 
of the propellant tank relief valve failing closed have been noted: 

(a) During qualification testing of the relief valve, the crack and 
reseat pressure band shifted due to a gumny substance found in 
the housing bore which could cause the valve to stick closed 
(ref. ER#FMCR48). This substance is believed to be a product 
of the reaction between fuel and COg in the atmosphere. These 
test conditions were considered to be unrealistic and test 
procedures were altered to run tests (liquid fuel) under vacuum 
conditions . 

(b) The inability of the relief valve to meet the required flow rate 
of 4 Ib/min at 255 psid occurred during qualification testing at 
the vendor (fWCR5l). The cause and rationale for corrective 
action are the same as noted in (a) above. 
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The second overpressure condition occurs if the primary Helium regulator 
fails open and either of the propellant tank relief valves or bust discs 
fail closed. This is based on the assusiptions that the descent propulsion 
subsystem has been pressurized and, furthermore, that the crew reaction time to 
implement corrective action exceeds 6 seconds. Note, both oxidizer and fuel 
relief valves and burst discs must operate in ordarto dump the full flow of 
a failed-open regulator. The regulator is orificed for a failed-open flow 
of 19 Ib/min and each relief valve is capable of dumping only 10 Ib/min. 

During acceptance testing of the ascent regulators at Fairchild, a helium regulator 
(p/N ISC 270-721-7-^) froze open. This icing condition (ref. FFC 27^) was a result 
of inadequate protection from atmospheric conditions. This problem was 
resolved by adding heat sealed polyethylene bags to protect the regulator. 

Failure history for the propellant tank relief valves was provided above. 

A similar overpressure condition of the propellant t anks can occur when 
pressurizing the system with the ambient helium start tank, if the secondary 
Helium regulator fails open and the propellant tank relief valve or burst 
disc fails closed. For this failure, the possibility of the crew isolating 
the failed regulator does not exist, since the stcurt tank is downstream of 
the solenoid shut off valve. In this case the crew could try to relieve 
pressure through the lunar dump system. However, if a slug of liquid pro- 
pellant flows throu^ the lunar dump (Parker) solenoid valve, the flow 
dynamics may cause the valve to close. The only other recourse would be to 
stage the vehicle. 
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Figure 2.2-lA 


DPS Oxidizer System 
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Figure 2.2-lB DPS Fuel System 
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Figure 2. 2- 1C 


DPS SHe System 
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Figure 2. 2- ID DPS Ambient Helium System 
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2.3 ASCENT PROPULSION SUBSYSTEM 


'Ihe APS Is sbovn schematically In Figure 2.3*1* Tuo ambient helium storage 
tanks. Figure 2.3*2, and tvo propellant tusks. Figure 2.3*3, comprise the 
pressure vessels in the system. The ambient helium storage tanks are located 
in the aft equipment bay. The propellant tanks are supported externally on 
the ascent stage along the +Y axis. Figure 2*3*^ shovs a detail viev of the 
propellant tank bottom. Figure 2*3-5 is a photograph shoving an installed 
fuel tank (lower tank) and figure 2*3*6 shows the helium tank 
installaticm (two larger tanks). 

With the exception of the lunar dusqp valve in the BPS and the RCS-lnterconnect 
valve in the APS, the funcclonal operation of the APS downstream of the regulators 
is similar to that of the BPS. 

Both the oxidizer and fuel tanks are Identical with respect to functional 
operation. Each tank system includes line components from the q\iad check 
valves to the engine interface flange. Hl^ pressure helium from the storage 
tanks is reduced to 184 psig (nominal) and fed to the oxidizer and fuel qiiad 
check valves. The helium reducer valves (regulators) are located downstream 
of the solenoid shutoff valves and upstream of the quad check valves. Two 
pressure transducers (redundant) are Included in the line downstream of the 
regulators to monitor regulator outlet pressure. The propellant and pressuri- 
zation sections are Isolated by explosive valves, located downstream of the 
check valves, until the system is operated. The tanka are protected from over- 
pressurization by relief valves with integral burst disc asseihlies set to 
relieve at 250 psig (max) . The relief valve assemblies are located off of the 
keliim lines upstream of the propellant tanks. In addition, the propellant 
lines contain test point dlscotmects utilized for check valve and relief valve 
testing, disconnects utilized for tank filling and disconnects for venting during 
the fill process. No propellant tank or feed line changes were made in the 
IM-10 and subsequent configuration. Pressure transducers are included in the 
feed line downstream of the propellant tanks near the engine interface to 
monitor the inlet pressure t j 'he engine valves. These transducers could be 
used to indicate propellant tank pressures during static conuitlors. The fUel- 
tai3k system contains a pre-valve assenhly. This is a solenoid operated device 
^ich ihen opened provides pressurized fuel throu^ the solenoid pilot valves 
to the engine ball valve drive actuators permitting engine operation. A pressure 
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transducer is attached to the ascent engine chamber to monitor chamber pressure 
during engine bums. 

Ihe APS helium tanks contain the supply gas for prcpe?lant tank pressurization. 

Each tank system consists of a single-ported titanium tank with ILne components 
consisting of a fill disconnect, temperature transducer and pressure transducer. 

The temperature and pressure transducers are located in the line dovnstream 
of the tank. Ihe tank is isolated from the dovnstream pressurization components 
by an explosively actuated (squib) valve. No autcssatlc over-pressurization 
relief capability exists in this system since helium is loaded at ambient temp- 
erature and the aft equipment beiy, Wiere the tanks are located, provides an 
ambient environment. Two helium tanks are utilized to provide partial APS 
redundancy; the supply of one tank is sufficient to expel the propellant fwxn 
the APS tanks for a noraial IM ascent from the lunar surface. In the IM-10 and 
subsequent configuration the temperature transducer is deleted and a redundant 
pressure transducer is Installed in its position in both neliimi tank lines. 

The oxidizer and fuel pressurization lines incorporate pressure transducers 
mounted approximately 6 ft from the tank inlet. Both propellant tanVa have 
temperature transducers and propellant level indicators whose sensing elements 
are internal to the tank and mechanically mounted to the tank bottom. 

Presently, the APS propellant low level detector is used to provide a warning 
of imminent propellant depletion to the crew (approximately 8-10 seconds bum 
time remaining) as a cue to tenni..ate ascent feed through the APS-RCS intercon- 
nects. Ihis is the only reqtiirement for the PU) and if this cue were supplied 
via another method, such as time or remaining, the PID could be eliminated. 

This is currently being considered 

because the present 10 seconds is not adequate to evaluate interconnect status 
and to permit alternate or corrective action prior to APS depletion in the 
event of a malfunction. 

An APS propellant tank rupture is possible as a result of loss of pressure in the 
tank during hlgh-g mission phases (i.e. - launch-and-boost and lunar landing). A 
pressure decrease below 62 psi would exceed the demonstrated capability of the tanks. 
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Figure 2.3-lA 


APS Oxidizer System 
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Figure 2. 3- 1C 




APS Fuel Syetem 
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Figure 2. 3- IB APS Fuel System 















APS Helium System 





















Figure 2.3-5 



2.4 REACTION CONTROL SUBSYSTEM 


TLe RCS ccnfiguration is shown schematically in Figure 2.4«1. Within the RCS 
there are two Independent systems (A and B), each containing Its own Helium, 
Propellant and Thrust Chaniber Assaahly (TC4) S'ictjons. Figure 2.3-5 shows 
the installation of a RCS nodule (upper three tanks). 

Helium is stored as a ges in a sjhertcal titanium tank (see Figure 2.4-2). 

The propellant quantity measuring device is installed on one end of the He 
tank. An external black box, located above the helim tank near the oxidizer 
tank, computes propellant remaining by measuring pressure and teo^rature of the 
helium in the tank. A jnessure transducer is located on the inlet-outlet port 
of the tank. Two redundant explosively operated, normally closed, squib valves 
seal tie oellum tank until just prior to separation from the CSM. 

Two line-sensed regulators are installed in series downstream of the helium 
squib valves and upstream of the quad check valves. The first regulator is 
normally in operation and regulates helium pressure to iSl psi. Should this 
regulator fail open, the second regulator will take over regulating pressure 
CO 185 psi. A pressure transducer is installed downstream of the regulator in 
both systems (A and B) in order to monitor the regulator outlet - propellant 
tank pressure. A parallel-series quad check valve is located in each branch 
leading to the propellant tanks to ensure isolation of one tank from the other. 

A relief valve is situated close to each helium port on the propellant tanks 
and is set to relieve at 232 psi. The relief valve consists of a burst disc, 
filter and relief mechanism. The burst disc ensures a sealed helium section 
during normal operation and will burst at 220 psi. Nb RCS helium pressurization 
system change was made as a result of the lM-10 configuration. 

Ehch propellant section consists of two cylindrical titanium tanks with hanis- 
pherical ends (.,»fc Figure 2.1t-3). The propellants are contained within a 
teflon bladder supported by a standpipe running length-vise in the tank. The 
standpipe is used to load and expel propellants. The helium pressiixant flows 
between the bladder and the tank wall for positive expulsion. 

A temperature transducer, located on the fuel tank outlets, monitors the tankage 
module temperature. A normally-open, latch- type, solenoid operated shut-off 
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valv« is situated dovnstream of the taoh feed port for tank Isolation (main 
shut-off valve). A ground test point is introduced here for line, valve and 
thruster checkout. Fiom this point tiie propellant flows into a manifold 
feeding ei^t thrust chamber assemblies. A press'ure tranG'’ icer on each mani- 
fold indicates propellant pressure. 

Uie nanlfclds of like propellant from each systos can be connected -Qirou^ 
the opening of noima.ly -closed, latch- type solenoid operated shut-off valves 
(crossfeed valves). Ascent engine propellant from the feed lilies may be 
introduced into the RC.' propellant manifolds through the actuation of noimally- 
closed, sdenoid operated, latch- type shutoff valves called secondary valves. 
Another set of valves (primary) are placed in series with the secondary 
valves and are noxmlly open (RCS/APS interconnect valves) . 5he primary valves 
are redundant ar>d would be used to close off the lines should the secondary 
valves fh.il open. Actuation of these valves provides propellant to either one 
or both manifolds. Propellant filters are located between the ascent propulsion 
subsystem and the interconxiect valves. No propellant feed system change was 
made as a result of IM-10 configuration. 

Each independent system feeds eif^t thrust chamber assemblies, two ^BCA's in 
each cluster, ensuring control in all axes, ihe lines feeding these two TCA's 
may be closed by noxmally-open sole33oid valves (isolation valves). On Uf-10 
and subsequentjlhe isolation valves have been removed. The TCA's .are grouped into 
clusters of four (quads). Each cluster has redundant heaters for the purpose 
of maintaining the engines at a correct operating temperature Level both in- 
flict and on the limar surface. A temperature sensor is located in each 
cluster for the purpose of monitoring engine tai^Tature. 
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2.5.1 Oxygen Supply Section 

Uie Oxygen Supply Section (shown schematically in Figrnre 2.5-1) storefl, in 
gaseous fom, all oxygen req .ired by the LM and maintains cabin or suit- 
pressurization by supplying oxygen in sufficient qi:u?ntlties to replenish 
losses due to crev metabolic consumption and cabln/sult leakage. Ibis 
section also provides for PLSS oxygen refills. 

The descent stage oxygen tank (Figure 2.5-2) provides all required IM oxygen 
from earth laimch through switch over to ascent stage oxygen supplies. The 
Quad-IU installation is shown in Fig. 2.2-6 _( upper left tank). In the IM-10 config- 
uration, an additional descent stage oxygen tank is located in Quad IV (see 
Figure 2.5-3; upper tank). Check valves are included in this configuration 
to provide tank isolation. The oxygen lines in the system were revised to 
accosonodate the additional oxygen components for 'Qie IM-10 configuration. 

Two identical ascent stage oxygen tanks (Figure 2.5-^) provide all IM supplied 
oxygen subsequent to switchover to ascent consumables. The installation of the 
tanks in the aft equlpnent bay is shown in Figure 2.3-6 (two smaller tanks). 

The oxygen pressure frcnn the oxygen control module is monitored by a pressure 
transducer located downstream of the module in the PLSS fill line. In the 
IM-10 and subsequent configuration this pressure transducer was deleted. 

The oxygen high-pressure control assembly reduces the level of descent tank 
pressure (3000 psia) to a level compatible with the normal operation of the 
oxygen control module (1000 psia). The control assembly also provides hi^- 
pressure relief capability through relief valves, U4h psig max., and buret 
diaphragm, ItoO psig max. 

The oxygen control module controls ■(he supply of Oq to the_ atmosphere revitalization 
section (5 psia and 3*5 Psia), ■to ■the cabin for emergency repressurization 
(5 psia) and to the PLSS recharge assembly (lOOO psia). The module also controls 
■the oxygen supply flow ra^te. 

The PLSS oxygen fill assembly provides a flexible hose and self-sealing disconnect 
for refilling of ■the PLSS primary oxygen storage ■tank. On IM-10, ■the high 
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pressure ojcygen PLSS refill module reduces the descent tank pressure level 
(3000 psia) to a lerel compatible with that of tiie hi^er pressure PLSS 
oxygen storage tank (l450 psia). Ihe high pressure relief capability is 
provided by a relief valve with a 1575 psig max relief pressure. A new 
interstage disconnect was added downstream of the high pressure oxygen 
PLSS refill module for the IM-10 and subseqiient configuration. A PLSS 
oxygen fill valve is also installed on LM-10 and siibsequent to provide shut- 
off capability to the hi^er pressure PLSS refill section. 

2.5.2 Water Management Section 

The Water fenagement Section (shown schematically in Figure 2.5-5) provides 
for storage and distribution of water used in the IM for evaporative cooling, 
metabolic consimptlon by the crew, and PLSS refill. 

The descent stage water tank (Figure 2.5-6) provides all water reqtiired by 
the IM prior to staging. Ihe tank provides positive e:q)ulslon of the water 
by the use of a bladder and standpipe design. Ihe tank is pressurized to 
47 psia with nitrogen prior to earth launch. Installation of Ihe tank 
in Quad II is shown in Figure 2.5-7* In the IH-10 configuration, an additional 
descent stage tank is located in Qiaad IV (see Figure 2.5-3; lower tank). Check 
valves are included in this configuration to provide tank isolation. 

Two identical ascent stage water tanks (Figure 2.5-8) provide all water req.uiied 
by the LM subsequent to switchover from descent stage water supplies. Ihese 
tanks are also pressurized to 4-7 psia with nitrogen prior to earth launch. 
Installation of the -Y tank is shown in Figure 2.5-9* 

Instrumentation in the EC%>ressurized oxygen and water system^ is limited to 
pressure transducers attached by threaded fittings (AN) on a line external 
to the tanks and water quantity measuring devices (WQMD) attached to the tanks . 
The location of the instrumentatic.i Wx^ii respect to the tanks is as follows: 
o d/s 0 ^ pressure transducer - approx. 3 feet o'f line downstream from 
the tank 

o A/s O 2 u’essure transducer - approx. 1? feet of line downstream from 
the tank 
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o WQMD sensor - mounted on gas side of d/S smd A/s Plater tanks. 

(effective through IM-8 only) 

o d/s <fater pressure transducer - approximately 6 inches of line frcan the 
tank. A second lower pressiire d/s water pressure transducer is 
located downstream approximately 5 feet of line frcan the tank. 

(ihese transducers are effective lU-9 and subsequent) 
o a/s water pressure transducers - approximately 3 feet of line from 
each tank (these transducers are effective IM-9 and subsequent). 
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Figure 2.5-1 OXYGEN SYSTEM SCHEMATIC 
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Figure 2.5~3 




Flg\a« 2.5-5 WATER MANAGEMENT SYSTEM SCHEMATIC 
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Figure 2.5-7 Descent Stage Water T&nk, Quad II 
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Figure 2.5-8 Ascent Stage Water Tank 


2-59 



2-6o 


2.6 BATTERIES 


The IM electrical power is provided by three battery types: Descent, Ascent 
and Explosive Devices (Fig. 2.6-1, 2,.6-2 aind 2.6-3 respectively). The Drscent 
and Ascent batteries serve as the prime power source, while the Explosive 
Devices (ED) batteries fire the pyrotechnic systems. 

The batteries are described in Table 2.1-1 and are shown in their relative 
positions with respect to the descent and ascent stages in Figures 2.1-3, 
2.1-5 and 2.1-12. Table 2.6-1 summarizes the electrical characteristics 
for each battery. 

The main batteries are monitored during malfunction only. Normally opened 
bimetalic thermal switches are provided, 5 in the descent stage batteries 
and 10 in the ascent stage batteries, with parallel wiring. When a 
battery temperature increases to l40 to 150*F, the thermal switches actuate 
sending a signal to the Hi cabin master alarm and caution and warning 
system indicating a battery malfunction. 

The onen circuit voltages of the ED batteries are monitored in the cabin: 
these measurements are not telemetered. 



TABLE 2.6-1 


BATTERY ELECTRICAL CHARACTERISTICS 

PRIMARY PRIMARY 

ELECTRICAL DATA ASCENT DESCENT 


Voltage (open Circuit) 
Ampere hour/battery 
Number cells/battery 
Number of batteries 


37.0 VDC 
296 A-Hmin. 
20 
2 


37.0 VDC 
400 A-H min. 
20 
k 


37 

20 

2 


ED 


1 VDC 
75 A-H 


2.62 




2.63 


TERMIN^L‘5 



Figure 2.6-1 


DESCENT BATTERY 



I 


V 



■ 




n9-s 


UDL,lt.005 


POS 




MAX 


VEMT VALVE 


Figure 2.6-2 
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3. POTOimAL ELECTRICAI. ENERGY SOURCES 


3.1 SUMMARY 

A review has been made of Hie IH pressure ox^en and propellant systems 
to detemlne If there are any con^nents in these systems that could, lead to 
a pressuie vessel Ihllurc. 

A review of the potential aechanlcal system causes of tank failures Indicate 
that adequate design margins and redundancy exist. Section 2 presents a 
discussion of the conditions for idiich fewer than three mechanical failures 
can produce a propulsion system over pressure. 

The analysis was not made for the time when the vehicle was powered down, 
namely from launch to IM activation. Iherefore, the primary objective of 
this section is to evaluate Ihe possibillly of electrically induced system 
over pressurization from a** *.ivation. ^e electrical energy sources idilch 
have been considered include pressure, t-°rpe nature and quantity transducers, 
and engine and solenoid valves. 

Ihe invest! _ition has shown that, with the exception of the Descent Engine 
pilot valve, none of the electrical components have ever experienced any 
failure where the medium that it monitors came in contact with the internal 
material of the subject cooqonents. 

Ihe fa^led Descent Engine pilot valve occurred at the vendor test facility 
on 7 June I 966 . ihe analysis has shown that propellant leaked into the solenoid 
causing a short. Corrective actions have been taken by improving the sealing 
capability. 

Squib valves were eliminated from consideration, since power is not supplied to 
the explosive initiator until the time of actuation. Once the valve is 
activated, power is i» longer applied and the bridge wire internal to the cart- 
ridge is disintegrated by the explosion thereby breaking the connection. Ihe 
RCS heaters have also been eliminated. Althou^ these heaters are an intent- 
ional source of electrical energy input, they are sufficiently removed from the 
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fuel and oxidizer systems (reference Figure 3.8-1) to be discounted as a 
source of pressure increase. 

ibe components which are potential sources of electrical energy fhll into 
three categories as shown in Table 3.1-1. Ihe transducers are protected 
by 0.23 amp fuses and have a maximum power input of 7 watts. 

The engine valves (APS, DPS and RCS) can produce up to 280 watts of heat 
input. However, since propellant is flowing during valve operation, the 
heat generated would be conducted to the thrust chamber and into space. The 
solenoid latch valves ha\*e a power input potential of ll*0 watts. However, 
the coils of these latching valves are operated momentarily, hence hi^ 
power inputs are of short duration. 

All of -the LM circuit breaters have been certified by North American Rockwell, 
Inc. Report No. IC 45U-OOIO. Ihe circuit breakers were subjected to a qual- 
ification test program which Included functional and environmental tests. 
Additionally, all the applicable fuse assemblies were subjected to a qxialifi- 
cation program per ICQ 360-045, -046 -04 t. 
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TABLE 3.1-1 


SUMMARY OF ELECTIITCAL ENERGY SOUl'iCES 


f Category/ 

* Component 

1 . ,.„i . , 1 .. . .i 

Reference 

Paragraph 

Max Electrical 
Power Input 
(Watts) 

1 Transducers 




1 (a) pressure 

3 . 2 , 3.3 

1.6 


i (b) temperature 

3.4 

O.OOO5 

■ 

(c) nuantity (APS) 
(IPS) 

3.6 

3.5 

7 J 
8.2 


Engine valves 

3.S, 3 . 9 , 
3.10 

280 


Solenoid valves 


l4o 


Remarks 


The maximum electrical power input occurs 
in the sensor electronics, which is isola- 
ted from fluid system. 

Effective heat input reduced by flow 
conditions. __ 

Adequate propellant f].ow conditions CMist 
in all cases to remove heat. 

Double failure required for continuous 
input. System temp, stabilizes at 
100° F with negligible system pressure 
Increase , 








3.2 PRESSUKE TRANSDUCER LSC 36O-60:' - XXX 

The 360-601 transducer is an absolute pressure device which is used in 
the ECS, RCS, DPS sind APS. The fluids being measured and the pressure 
range of the devices are listed in Table 3,2-1. 

The pressure sensing device is a twisted Bourdon tube whose motion is pro- 
portional to pressure. A cross-sectional view of this transducer is shown 
in Figure 3.2-1. The wetttl areas for normal operation and for a structural 
single-point failure of the Bourdon tube are also shown in Figure 3*2-1. 

Tiie nonmetallic materials ej^osed to the pressure raedivim for normal and 
single-point failure cases are identified and discussed in Section h. 

As shown in Figure 3*2-2, power is supplied to this transducer through the 
signal sensor circuit breaker on panel I6 and a l/k amp fuse in the sensor 
power fuse asseaibly or ECS relay box. The maximum operating current is 10. 
taa at 28 VDC. For a single-point failure within the sensor electronics, the 
maximum power which could be drawn is 200 ma. However, a 1^7 -ohm (l/3 watt) 
resistor in the electronics would burn open under these :ionditions, termina- 
ting the current flow.- The highest sustainable current for this device is 
60 ma. At this current level, the limiting resistor mentioned above is 
dissipating l/k watt (twice rated power). This condition results in 1.6 
watts of heat input to the adjacent pressure vessel. 

The most critical installation of this transducer is in the descent oxygen 
line. This electrical energy source is not capable of inducing a tank failxire. 

This class of transducers has never incurred any applicable failure suggest- 
ing fluid breakthrough or excessive fluid heating due to electronic failure. 



TABLE 3-2-1 


APPLICATIOMS OF PRESSURE TRAl'ISDUCER L3C 36O-6OI 


SUB 

SYSTEM 

DASH 

NUMBER 

!_ MEASURHOTT 

' NUMBER 

NOMENCLATURE 

;range 

jpsia 

FLUID 

i 

ECS 

-203 

GF 27^1 

Primary Pump Press 

0-60 

Water Glycol 

.203 

2921 

Red Pximp Press 

0-60 

Water Glycol 

-207 

3571 

Cabin Press 

0-10 

Oxygen 

-201 

3582 

ASC Tank # 1 Og Press 

0-1000 

Oxygen 

-20i 

t 

j 3f>83 

ASC Tank # 2 Og Press 

0-1000 

Oxygen 

! 

! 

-209 

3584 

Desc. Tank 0 Press 

0-3000 

Oxygen 


-205 

3591 

Upper Hatch Relief PressO-25 - 

Oxygen 


-205 

3592 

Fwd. Hatch Relief Press 

0-25 ' 

Oxygen 

; 

-203 

i 4501 

Deo HgO Press 

0-60 (0-25 LM9) 

Water 

! 

-203 

I 4500 

HgC Tank Press 

0-60 (0-25 IM9) 

Water 


-203 

' 4502 

H_0 Press IM-9 

ti 

0-60 (0-25 M9) 

’Water 


-203 

4503 

HgO Press IW-9 

0-60 (0-25 LM9) 1 

’Water 


-209 

0584 

Desc. GOX Pres. (IJ5-LO) 

>0-3000 ; 

Oxygen 




Desc. Tank HgO Press 

0-60 

1 


RCS 

-103 

' OR 1101 

Sys. A He Tank Press 

0-3500 

Helium 


-103 

1102 

Sys. B He Tank Press 

0 

0 

u^ 

1 

0 

Helium 


-105 

1201 

Sys. A He Manif. Pres 

0-350 

Helium 


-105 

1 1202 

Sys. B He Manif. Pres 

0-350 

Helium 

i 

-105 

: 2201 

Sys, A Fuel Manif. Pres; 

3O-350 

A-50 

1 

-105 
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Sys, A Oxid Manif Press 

0-350 

'•2°4 

L I 
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Sys. B Oxid ^^t'nif Press 

0 -350 ' 

1 : 

: "2\ 
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-lOT 
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0-300 

Helium 


-ICT 

3501 
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0-300 

A-50, He 


-107 

3611 


Fuel IntcrI'aee Press 

O-3CO 

A ~50 


-107 

4001 


Oxld . Ullage Press 

0-300 

»A' 


-107 

4 ii:, 


Oxld . Interface Press 

0-300 

»A 

APS 

-101. 

GP 0001 


He Tank // 1 Press 

0-4000 

Helium 


-101 

0002 
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0-4000 

Helium 


-107 

0018 
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0-300 
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-107 

0025 
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0-300 
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-107 

0501 
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0-300 
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•107 
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0-300 
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-101 

oo4i 


He Tank // 1 Press Redund. 

0-4000 

Helium 


-101 
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0-4000 
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Figure 3.2-1 

Pressure Transducer - LSC 36O-60I 
(Sensor Area) 


Wetted Areas 



Electronics 

Area 




Figure 3-2-2 

Pressure Transducer schematic 
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3.3 PRESSURE TRANSDUCER LSC 36O-62U - XXX 

The 360-62U transducer is an absolute pressure device used in the ECS, APS, and 
DPS systems. The fluids being measured and the range of the device are listed 
in Table 3.3-1. 

The pressure sensing devices are silicon strain gauges mounted on an integrally 
machined diaphragn. A cross-sectional view of this transducer is shovm in 
Figure 3. 3-1. The wetted areas for normal operation and for a structural single - 
point failiire of the diaphragn axe slIso indicated in Figure 3*3-1. The non- 
metallic materials exposed to the pressure medium for normal and single-point 
failure cases are identified and discussed in Section 4. 

As shown in Figure 3-2-2, power is supplied to these transducers by the signal 
sensor circuit breaker on Panel 16 and a ^a fuse in the sensor power fuse 
assembly or ECS relay box. The maximum operating current is 10 ma at 28v. For 
a single-point failure within the sensor electronics, the maximum current that 
could be drawn is 0.15a. However, a 221-ohm (1/8 W) resistor in the electronics would 
burn open under these conditions, terminating the current flow. The hipest 
sustainable current for this device is 46 ma. At this current level the limiting 
resistor mentioned above is dissipating ^ watt (twice rated power) . This con- 
dition results in I.3 watts of heat input to the adjacent pressure vessel. 

The most critical installation of this transducer is in the oxygen manifold. 

However since the power level is below that for the type-6oi transducer 
(see Paragraph 3.2), no significant pressure rise can result from a failure of 
this transducer. 

This class of transducers has never incurred any applicable failure suggesting 
fluid breakthrough or excessive fluid heating due to electronic failure. 
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TABLE 3.3-1 

APPLICATIONS OF PRESSURE TRANSDUCER LSC 36O-624 


SUB 

SYSTEM 

DASH 

NUMBER 

NUMBER 

MEASUREMENT . . 

NOMENCLATURE 

RANGE 

^psia 

FLUID 

ECS 

-211 

GF3589 

0 Manifold Pressure ; 

C j 

0 -l 400 

; Oxygen 

DPS 

-111 

GQ3OI5 

Start Tank Pressure | 

0 - 1 T 50 

; Helium 

APS 

-1 

GPI5OI 

Fuel Isolation valve inlet pressure j 

0-250 

1 A-50 

APS 

-1 

GPI503 

Oxidizer isolation valve inlet ' 

pressure 

0-250 

NgOj, 

APS 

-3 

GP 2010 

j 

j Thrust chamber pressure 

0-100 

A-50, NgOj^ 



II -£ 


FLUID 



INLET LINE (2-8 IN. LONG) 

IS BRAZED INTO SYSTEM FOR 
PROPULSION; ECS USES GAMMAH 
FITTING 



WETTED AREA 
NORMAL 

DIAPHRAGM FAILURE 


STRAIN GAUGE j 
(SILICON) j 

EPOXYLITE 6203 ON 
DIAPHRAGM AND STRAIN GAGES 

r 

JL 

I 
I 
I 
\ 

ELECTRONICS \ 

AREA \ 


METAL/GLASS 
SEAL ON WIRING 


FIGURE 3.3-1. PRESSURE TRANSDUCER LSC 360-624 

(SENSOR AREA) 


3.U TEMPERATORE TRANSDUCER LSC 36O-605 - XXX 

The 360-605 transducer is a resistance thermometer device used in the DPS and 
APS to monitor propellant temperature. The fluids being measured and the ranges 
of the device are listed in Table 3»^1* 

The resistance thermometer consists of a platinum wire sensing element enclosed 
in a cylindrical housing to allow sensing of the fluid temperature. A re;istance- 
to-D C converter (503-2 module in SCEA) provides ihe analog voltage output 
proportional to the sensor resistance (nominally itoO ohm at 32°F) . A cross- 
sectional view, including wetted areas for normal and single-point failure 
conditions, is shown in Figure 3*^1* The non-metalllc materials exposed to 
the pressure medlim for nonnal and single-point failure cases are identified and 
discussed in Section 4. 

Bower is supplied to this sensor from the above mentioned 503-2 SCEA module 
(reference Figure 3*4-2) . Nbmal operating power is O.5 ma at 8.5 VDC. The 
maximum power that can be delivered by the SCEA, as the res-olt of circuit 
feil'ire or propellant leakage, is .OOG5 watts. 

This electrical energy input is incapable of producing a significant pressure 
rise in the fluid medium. 

This class of transducers has never inciirred any applicable failure suggesting 
fluid breakthrough or excessive heating dioe to electronic failure. 
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TABLE 3.4-1 

/PLICATIONS OF TEMPERATURE TRANSDUCER LSC 36O-605 


1 

DASH 


MEASUREMENT , 



SYSTEM ' 

1 

NUMBER 

NUMBER 

NOMENCLATURE 

' RANGE 

FLUID 

DPS 

-303 

CiQ 37.1.8 

Fuel tank § 1 Temp. ' 

20-120 

A-50 


II 

37.19 

Fuel tank #2 Temp. 

- Note 1 

A-50 


11 

I^^18 

Oxld. tank #1 Temp. 

20-120 

^2^4 


It 

4219 

Oxid. tank #2 Temp. . 

20-120 

Ng04 

APS 

1 

W 

0 

OP o;iB 

Fuel tank Tenp. 

: 20..120 

A-50 


.303 

1.218 

Oxid. Tank Temp. 

20-120 

1 

NA 


NOTE 1: These Immersion temperature measurements have been replaced by tank skin 

surface temperature measurements on IM-10 swid subsequent. 






FIGURE 3.4.1. TEMPERATURE TRANSDUCER LSC 360-605 

(IMMERSION TYPE) 



Figure 3. 4-2 

Temperature Transducer Schematic 
(LSC 360-605.) 
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3.5 PROPELIAMT QUAMTITY GAUGING SYSTEK ISC 370-00009-35 


The DPS Propellant Quantity Gauging System (PQGS) consists of four probe 
assemblies, one in each propellant tank, and one control unit. The PQGS 
measures iiie conductance or capacitance of the fuel and oxidizer, respect- 
ively, and converts it to a quantity display and telemetry signal. In addition, 
each probe has a low-level sensor which actuates when 5-6^ (9*375 inches) of 
propellant remains in the tank. The probes are bolted to the tank bottom and 
extend up to the diffuser flange at the top of the tank. A cross-sectional 
view of the probe assembly is shown in Figtire 3*5-1* The fluid interfaces 
for nomal and single-point falliire conditions are shown in Figure 3*5-1* 
Efaterials in contact with the propellants are identified and discussed 
in Section 4. 

A circuit diagram of the PQGS system is shown in Figure 3*5-2* Figure 3*5-3 
Is a simplified schematic of the sensor electronics. Since the control unit 
is located in Quad IV, removed frcQ the tank locations, it has not been consi- 
dered as an energy source. Normal operating current supplied to the sensor 
electronics, mounted at the tank bottxxa, is 54 ma at 20.5 volts (l.l watts). 

Two failure types exist which could increase the energy input to the tank. 

The first is an electrical failure in the sensor electronics that can increase 
the heat input. The control unit can deliver a maximum of 400 ma throu^ a 
DC-to JX: converter to 2 probe assesiblies. (The olher 2 probes are powered by 
another 400 ma supply.) The maximum current drain for one inrobe is reduced 
by the converter efficiency and normal current to the second probe. Current 
draw in excess of 300 ma to one probe would cause the control xinit overcurrent 
device to latch and stop the current flow. A sensor electronics failure re- 
sulting in current of up to but not exceeding 300 ma is ijoDprobable . A second 
failure would increase the current to 400 ma which is the value used In the 
following thermal analysis. 

If a short circuit occurs (dissipating a maximum of 8.0 watts) within the 
2.5 inch diameter potted electronics at the base of the tank (initially at 75°F) , 
the transient thermal response of this volume will be 122°F after 45 minutes and 
179°F after 2,0 hoiirs of operation. The adjacent 1 cu. in. volume of propellant 
directly above the electronics case will reach 77°F after 45 minutes and 93°F 
after 2.0 hours. However, the PQGS is only on for ^ 45 minutes and propellant 
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3-5 cont'd 

is flowing out of the tank for the last 12 minutes. 

Propellant leakage into the sensor electronics from a structural single-point 
failure could induce an electronic feilure ^ich would result in the same maxi- 
mum sensor current. Hiis failure would require a leak throu^ the hermetic seal, 
leak throu^ the silastic potting compound - RTV 20, deccoposition of electronics 
capsule epoxy potting compound, and a circuit failure. 

The second failure type is a failure of the sensor electrodes idiich could deliver 
electrical energy directly to the fluid in the sensor tube. Normal power dissi- 
pated in the fluid is 1 to 10 microwatts. A short circuit between any of the k 
electrodes, or from an electrode to ground, would increase the power dissipation 
in the electronics from 1.1 watts to about 1.6 watts. No power would be dissipated 
in the fluid since the electrode path throu^ the propellant has essentially no 
resistance. In addition, the sensor electronics would stop current flow for a 
short circuit. The only feilure mechanism which could Increase fluid energy is 
a finite resistance path through the propellant (greater than 28 ohms for oxidizer, 
0.15 ohms for fuel); no such failure mode could be postulated during this study. 

If this did occur, the power dissipation in the adjacent 1 cu. in. volume of fluid 
(initially at 75°F) would be .36 w. 

A simplified transient thermal analysis was performed for both liquid and gas 
envlroiments, assuming conduction to the surrounding fluid and alumlnimi tube. 

The following temperatures have been computed: 

o 1 cu. in. of liquid: 107°F after U 5 minutes and 123°F after 90 minutes 

o 1 cu- in- vapor: (At 80 psla, the mixture will consist of l 8 ^( 

82% He or 2 . 5 ^ A-50/97-5^ He) 

- NgOj^: 230°F after 3 minutes and 260°F after 30 minutes 

- A- 5 O: these temperatures will be lower because of the higher He content. 

It can therefore be concluded that the DPS Pror llant Quantity CSauging system 
cannot provide the electrical energy required to induce tank failure. In addition, 
the PQGS 1-.S never experienced a failure suggesting fluid breakthrou^, excessive 
fluid heating due to electronics failure, or electrode short circuit.. 
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The nonraetallic materials in the Propellant Quantity Gaging System (pQpS) 
located internal to the DPS fuel or oxidizer tanks and exposed to the 
propellants are Rulon A and Teflon. 

The Rulon A material Is a blend of Teflon TPE resin (Teti^floroethylene) 
and ceramic strands manufactured by the Dixon Corp. They indicate that 
the material composition is proprietary however, heating for extended 
periods of time at temperature above 1000°F will drive off the Teflon 
leaving a white powder ash of the ceramic. Analysis of Rulon A here at GAC 
have indicated the major constituents of this ash to be aluminum magnesium 
silicate. The ceramic filler is added to the Teflon to increase stiffness 
and prevent creep and cold flow of the material. Compatibility of the 
material with fuel and oxidizer at ambient temperature for 60 days was 
demonstrated in Allison Report BG. 0365-0*‘^5 dated 5-9-66 "Evaluation of 
Rulon Covered Teflon Bumpers for LEM Descent Stage Propellant Tank 
Antislosh Baffle." There is 0.26 pounds of Rulon A in the PQGS ejqiosed 
to the propellants. 

There is 0.055 pounds of Teflon in the PQGS exposed to the propellants. 

This Teflon is used as tubing, sheeting and a diffusion btxided coating 
(gx'een) containing a chromium oxide to give it the green color. The 
Teflon used is primarily a TFE and FEP resin (Plorinated ethylene-propylene). 
Sumarous reports demonstrate the compatibility of TFE and FEP with pro- 
pellants at ambient temperature. 

The PQGS electrodes penetrate the pressurized area through a glass to metal 
seal.. External to this seel (no propellant exposure) the electrical leads are 
potted in aii approximately ly inch long column of RTV-20 silicone rubber. 

There is .017 pounds of this silicone rubber. 

The electrical leads then terminate in an electronics package containing 
numerous nonmetallics such as printed circuit boards, etc. with the primary 
nonmetallic being an epoxy, Stycase IO 9 O. There is 0.3 pounds of Stycast 
1090 located in the electronics package. The volume of the 606 I aluminum 
electronics package housing the RT\T-20 and Stycase IO 9 O is ih cubic inches. 



No information is currently available on the flammability of Rulon A, Teflon, 
RT7-20 or Stycase IO9O in or A-50. Recent tests conducted at Atlantic 
Research Corp. indicate that fuel vapors can be ignited as a monopropellant 
with an electrical spark at approximately 450°F and the fuel liquid can be 
ignited at approximately 550 °F, Teflon exposed in the fuel liquid and vapors 
during these tests did not burn. Tests conducted in air or oxygen have 
indicated the autoignition temperature for epoxys such as Stycast I090 and 
for silicone rubbers such as RTV-20 to be over 600°F. These temperatures 
would be expected to be at least as hi^ in ^2^4^ assuming N^O^^ could 
support combustion. 

An analysis has been made for the pressure rise in the propellant tanks 
or the electronic package housing, assuining that these quantities of the 
above nonmetallic materials have burned. 

Assumed Propellant Tank Ullast Vol. 0.9^ ft.^ 

Expected P = 79 psi for Rulon A plus Teflon 
16 psi for RTV-20 
175 psi for Stycast IO9O 

3 

Assumed Electronics Package Vol. 14 in. 

Expected P = i860 psi for RTV-20 

20300 psi for Stycast IO9O 

From this analysis of delta pressure rise it can be seen that ccxnbustion 
of the nonmetallics could cause a tank pressure rise to the 260-275 psi 
pressure relief limit and vent. However, combustion and pressurization within 
the electronics package would cause that unit to be overpressurized resulting 
in seal leakage or case failure. 
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FIGURE 3.5-1. PQGS SENSOR. 
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Figtire 3.5-2 


PQGS System Schematic 
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Figure 3.5-3 
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3.6 PROPELIANT IiEVEL DETECTOR LSC 270-801 


Uie low-level detector for the ascent propellant tanks consists of a probe 
assembly extending Into the tanks which contain magnetic colls and their 
associated circuitry. Figure 3«6-l is a cross-sectional view of the detector 
showing fluid interfaces for normal and single-point failure conditions. The 
non-metallic materials exposed to the fluid mediran for these conditions are 
identified and discussed in Section 4. 

The propellant level detector is powered from the sensor power fuse assembly 
as shown in Figure 3*6-2. The normal power requirements are 8 ma at 28v (.22 
watts) . Two failure modes exist \rtiich would result in higher electrical 
energy inputs. 

Failure of a capacitor in the electronics could result in 28 v being applied 
either directly across a IK resistor or a forward biased diode. In the first 
case^ the power dissipation increases to 0.9 watts, which would be transmitted 
to the tank and its contents. For the second case, the current would rapidly 
exceed the 250 ma rating of the fuse and the current flow would cease when the 
fuse opens. 

A weld failure of the sensor case would allow N^Oj^ to enter Hie sensor tube, 
and react with the potting. Since this could result in numerous circuit failure 
modes, the worst case is assumed to be the maximum current that can be drawn 
through the fuse (250 ma). This increases the electrical heat input to 7 watts. 

If a short circuit dissipating a maximum of 7 watts occurs within the potted 
electronics in the probe (initially at 75°F), the average temperature of the probe 
will be 170°F after 45 minutes and 175°F after 4 hours of operation. The therma] 
response of the adjacent ^ in. thick cylinder of propellant surrounding the probe 
will be 80°F after 45 minutes and 82°F after 4 hours of operation. 

It can therefore be concluded that the Propellant Level Detector cannot provide the 
electrical energy required to induce tank failure. 

The Propellant Level Detector has never experienced any applicable failure suggesting 
fluid breakthrough or excessive fluid heating due to electronic failure. 
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Figiire j.6-2 

Propellant Level Detector Schematic 



3-23 








3-7 SOLENOID VALVE LSC 310-403 

■This latching solenoid valve is used in the RCS as the Main Shutoff ( 4 ), 
crossfeed (2), quad isolation (l6) and ascent feed (8) Valves; it is also used in 
the DPS fo’' lunar dump (2). (Note: The RCS quad isolations veilves are deleted 

cai IM-10 and subsequent.) The locations of these valves are shovn in Figures 
2,1-2 and 2.1-5, The wetted areas for normal and single point failiire conditions 
ai'e shown in the cross-sectional view in Figure 3*7-l- The materials exposed to 
the pressure medium for normal and single-point failure conditions are identified 
and discussed in Section 4 . 

The electrical configuration for all Installations Is the same, and is shown in Fig. 
3.7-2. Power consumption and circuit breaker protection for each valve installation 
under normal ccnditicxis are suDDEurlEed in Table 3 *7“!* 

The maximum electrical energy input to the fluid system would result from a partial 
coil short causing current to be drawn to the circuit breaker protection limit. 

This conditicxi could result in electrical energy inputs up to l40 watts. A similar 
failure could be induced in the coils, if the propellant were to leak past the struc- 
tural Interface and dissolve the coil potting. 

Propellant flows through the valve cavity and is separated from both solenoid coils 
by a stainless steel plate welded into the valve structmre. Normal operating pressure 
is l80 psi at 70"^ . 

The probability of the propellant penetrating the stainless steel shell separating 
the propellant from the electrical coil is low. However, should this ccxidition 
occur, the propellant would dissolve the potting compound surrounding the coil. 

The pressure generated by the reaction and the pressure rise resulting from increased 
current can relieve into the surrounding area through the hole in the valve used to 
bring the electrical leads to the coil. 
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3.7 


coat'd 


Pressure can also relieve through the propellant lines to the tank ullage volunse. 

In no case could a significant pressure rise occur in the tanks as a result of 
this failure. In addition, since power is supplied to the valve only when it 
changes state, even the worst case input of liJO watts could cnly exist for one or 
two seconds- The longest steady state energy input resulting from a single failui’e 
is 50 watts due to a failed ''on*' solenoid coil. 

Test data indicate that in the flight caifiguration (fluid in the cavity) the 
valve temperature would stabilize at 400-450°F. If a main shutoff valve fails 
in this manneij the tank temperature would increase to, and stabilize at, 100°F 
in about 50 hours. This is well below the energy level required to damage the 
system. 

Therefore, solenoid valve failures of any kind cannot contribute significantly 
to a system pressure increase. 

This solenoid valve has never experienced any applicable failure suggesting fluid 
breakthrou^ or excessive fluid heating due to solenoid coil defeat. 
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TABLE 3 .T-I 

SOLENOID VALVE ELECTRICAL CQNFIGl'RATIONS 


1 

CIRCUIT 


VALVES/ 


' APPLICATION 

BREAKER 

RATING 

CB 

COMMENTS 

P.CS Main Shutoff 

Sys A (b) Main 30V 

5A 

2 

1 

1 

PCS Quad Isolation 

Sys A (B) Isol Vlv. 

5A 

8 

Removed from IW-10 & Sub I 

PCS Accent Feed 

Sys A (B) ASC Feed 

5A 

4 

» 

PCS Crossfeed 

Crsfd . 

5A 

2 


DPS Lunar Dump 

Des. He Reg/Vent 

5A 

2 



L 




3 0 * 

-c' 


Wetted area 

^ single point failure 

> <- normal 






3.8 RCS IKJECTOR VALVE LSC 310-130 


Ihe RCS Injector Valves control the fuel and oxldiser flow in the RCS engines. 
There are 2 valves pi'r engine, 32 total per vehicle. Each valve contains 2 
coils; the primary coll for normal operation and the secondary coil for backup 
operation. A cross-sectional diagram of the injector valve, including the 
wetted area for normal and single-point failure condition^ is shown in Figure 
3.8-1. Materials exposed to the propellant for these conditions are identified 
and discussed in Section 4. 

Power is supplied to the primary valve coils free the ei^t Thrust Chamber 
Assembly quad circuit breakers throu^ the jet drivers in the ATGA. ^ihe 
secondary coils are powered from the Attitude Direct Control circuit breaker 
on Ihnel 11 through the Attitude Control«‘r Assembly hardover switches amd 
the + X Translation push button (for downward firing jets only). Als(^ when 
mode control switches (one per axis) are in direct, the secondary coils are 
powered throu^ the pulse/direct switches of the ACA. These circuit config- 
urations are illustrated in Figures 3*8-2 and 3.8-3* 

Normal injector operating current is 2 amps at 28 volts. As in the case of 
the solenoid valve, two failure modes exist idilch could result in heat input; 
partial coll short circuit or potting corrosion resulting in heat buildup and 
coil damage. However, when the Injector valves operate, they provide a fluid 
path to the vacuum of space, hence electrically induced pressure buildup in 
the injector valve is impossible* The valve will operate for any short circuit 
up to Ihe circuit breaker current limit, since the magnetic field is approximately 
constant for any partial coil short circuit (l.e. half the turns yields twice 
the current, hence the magnetic field is constant). If the engine fails to 
fire, the RCS caution and warning will advise the crew to open the circuit 
breaker. Therefore, the RCS injector valves cannot be considered a significant 
source of energy input. 

The RCS injector valves have never experienced any applicable failure suggesting 
fluid breakthroueh or excessive fluid heating due to valve coil defects. 


3-29 




3 - 3 < 










+D 28 



Attitude 

Controller 

Assembly 


Figure 3.8-3 

RCS Injector Valve Schematic 
(secondary coils) 


3-32 


3*9 ENGINE PRE- VALVES (DPS & APS) 

The pre-valves in the main propulsion engines are used to isolate the fuel from 
the solenoid pilot valves. These valves are the same for the ascent and descent 
engines. A cross-sectional view of this component, including fluid interfaces 
for nomal and single-point failure condition^ is shown in Figure 3* 9-1* Mat- 
erials exposed to the fluid medium for these conditions are identified and 
discussed in Section 4. 

Power is supplied to the APS pre-valves from the CDR and LMP Ascent Engine 
Latching Device (AELD) circuit breakers through series/parallel relay contacts as 
shown in Figusre 3 * 9 - 2 . The pre-valves are opened for an engine-on command, 
along with the pilot valves. Normal operating current is 1 amp. Two failiire 
modes exist ■^ArLch could cause an increase in electrical energy input. A partial 
coil short could result in current drawn up to the circuit breaker protection 
limit of 4.5 amps (assuming other valves drawing noimal current) . A leak into 
the coil area could induce a similar failure by dissolving the potting and 
causing coil shorts. For either of these failures of the APS pre-valves, the 
maximum heat input is 125 watts. Since the valves are only energized when the 
engine is firing, any local heating will be conducted away by the propellant 
flow. 

The DPS pre-valves are powered from the DECA power and Descent Engine Override 
circuit breakers throu^ normally open relay contacts. This configuration is 
shown in Figure 3*9-3. The pre- valve is actuated by the engine arm switch 
in the descent position. The same failure modes as on the APS exist for this 
valve. However, the DPS pre-valve is not operated simultaneously with the 
engine valves. In flight, the engine is aimed (pre-valves open) 5-10 seconds 
prior to Ignition. This condition would not allow appreciable heat input prior 
to conducting the energy away with the flowing propellants. Therefore, such a 
condition is not capable of providing any appreciable pressure rise to the 
related system. 

The engine pre-valves have never incurred any applicable failure suggesting 
fluid breakthrough or excessive heating due to electronics failure. 
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Figure 3 •9-1 
Solenoid Pre Valve 
(APS & dps) 











DE Arm 
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Figuie 3--:>-3 
DPS Pre -Valve & Pilot 
Valve Schematic 












3.10 SOLENOID PILOT VALVES (DPS & APS) 


Uie solenoid pilot valves are provided to control the flow of fuel against 
pistons ^diich hydraulically drive the hall valves. Ihe hall valves control 
the main flow of prcjjellants to the chasiber. A cross-sectional view of the 
pilot valves fbr the DPS and APS are shown In Figures 3.10-1 and 3*10-2, 
respectively, along with the fluid interfeces for nomal auu. single-point 
failure operation. Materials exposed to Uie fluid nediua for these conditions 
are identified and discussed in Section U. 

A nsanual or auto "descent engine on" signal provides a relay contact path from the 
DECA power circuit breaker (20A) to the !ffS Pilot Valves. Power can also be 
supplied from the Descent Qiglne Override circuit breaker (IQA) by operating 
the Descent Ehgine Override switch (lief. Figure 3.9-3)* 

'ihe fhilure modes for these valves are the same as for the Pre-Valves described 
in Para. 3.9* 

The APS pilot valves are powered from the CDR and IMP AELD circuit breakers 
( 7 . 5 A) in parallel for Auto Engine On, Abort Stage or Manual Engine Start 
connands (Ref. Figure 3*9-2). 

Althou^ the heating effect is greater (»200 watts), the sane operational 
constraints apply i.e. valve is only powered for engine firing which results 
in propellant flow more than sufficient to dissipate the energy input. Therefore, 
such a condition is incapable of providing any appreciable pressure id.se to the 
related syston. 

There has been only one occurence where this valve has experienced a propellant 
breakthrough* Ibis failure occuired at the descent engine vendor on 7 June 1966 
where the solenoid was partially shorted resulting from propellant leakage into the 
solenoid (Failure Report # FST 18884). Corrective action provided an improved 
sealing capability to the solenoid coil by EO C1046l9-E2, effective on solenoid 
valves 128, 130 and subs, descent engine 1020 and subs. There have been no 
additional failures of propellant breakthrou^. 
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Figure 3.10-2 
DPS Pilot Valve 
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k. MATERIAI.S C0MPATIBILI1Y 


U.i ESTSOBUCTION 

This section presents a review of material canpatibility for those materials 
exposed to ^2^4? A-50, 0^ and KOH. Emphasis has been placed on the coogjati- 
bility of the non-metal lie materials in each subsystem exposed to these I'luids 
in normal and single -poiri'^ '^'aii.cre racxles of operation. These conpatibility 
considerations have ind.-^ed: l) evaluation of the material degradation when 

exposed to the fluir'. at normal operating temperatures i.e. is it dissolved or 
not, 2) is the material impact or shock sensitive when exposed to the fluid, 
and 3) is it capable of reacting if heated to a high temperature? For the 
electro-mechanical instrimientation devices, an estimate of pressure rise in the 
system as a result of assmed combustion of non-metallics has been canputed. In 
addition, a general discussion of materials compatibility is included for those 
items eceposed to an overboard oxidizer leak. 

4.2 NITROGEN TETROXIDE (H^Oj^) 

A review of the non -metallic materials normally exposed to the propellant oxidizer 
in RCS, APS, and DPS (see tables 4.2-1, 4.2-2 and 4.2-3, respectively) indicates 
that only Teflon, Kynar, and Carboxy-Nitroso-Rubber are used. Teflon is used in 
static, sliding and impact seals. Kynar is used in sliding and impact seals. 
However, with the exception of the RCS quad check vaj.ves, it is limited to operation 
in the test/servicing quick disconnects. Carboxy-Hitroso-Rubber (CNR) is used in 
static and sliding seals, and as an inqpact seal in the RCS quad check valve. This 
check valve sees only heliimi and vapor, since the liquid oxidizer Is contained 

within a Teflon bladder. 

Impact data at up to 70 ft-lbs (limits of test) indicated no reaction in N^Oj^ for 
Teflon and Kynar. No impact data are available for CNR other thari component and 
system tests. Available data indicate that all three materials are compatible with 
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4.2 cont'd 


NgOj^ and are not attacked by extended liquid or vapor exposure at normal operat- 
ing temperatures. 

Limited data on Teflon decomposition products e:q)osed to oxidizer vapors in a 
vacuum at 200, OCO feet indicate no reaction (Reference 7). Othervise there are 
no data available on the exposure of hot (over 16 o°F) Teflon, Kynar or CNR to 
NgOj^ liquid or vapor at operating pressures of 200 psi. 

Butyl rubber is used as a seccxidary static seal in the Propellant Level Detector 
and Explosive Valves. Data indicate tMs material has limited compatibility in 
NgOj^ liquid. Extended exposure tends to soften the material and make it tacky. 

No impact or elevated temperature data are available for this material; however, 
it is not used under those conditions. 

Non-metallic materials used in electro-mechanical devices (such r,s the Propellant 
Quantity Gaging System, Temperature Transducer, Absolute Pressure TrariClucer 
Solenoid Valve) require a structural metal case failvire to expose non-metallic 
components of the el^trical system to ^^ 2 ^ 4 * exposure, these non-metallic 

materials woiild be attacked by the at normal temperatures and cause leakage 

through the device. These materials are identified in Tables 4.2-1 through 4.2-3. 
No impact or elevated tenperature react?. <»i data are available. 

Material ccxnpatibility testing references shown in Tables 4.2-1, -2, and -3 are 
presented in Para. 4.8. Ihe materials are canpatible with the fluid for static 
or impact conditions as demonstrated by the references. Leaks through transducer 
metal cases into areas idiere no compatibilil^r reference is shown are intended to 
indicate that: l) no data are availaole, and 2) the generic type materials 

exposed in this area are generally attacked by the fluid. 
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TABIK 4.2-1; U-! RCS OXIDIZER SIDE NON-METALLIC MATERIALS LIST 


— 

! 

cci'U'o::].::'? :;a.'.e 
a;:d 

■ 

ak-licatig:: 

MODE 
KCi^/AI. OR 
SIL'GLE KALFUIICTIG 

TYPE 

OF 

I CONTACT 

CC!*Lt'A- x.ni 
nr-OryAr.i 

Lin 
■TI jc 
,=A -.8) 




STATIC 

r.fFACT 

Oxidizer T&nk 

! 

LSC-310-405 

Teflon 
TEE & FEP 

Expulsion Bladder 

N 

Jluid 

4 

1 

» 

1 

1 

Teflon TFE 

Space .’-Top of Stand- 
Fipe Gasket-Static- 
Base Cover to Tank 
Vent Line-Strings 

N 

Fluid 

4 

1 

! 

1 

1 

Teflon 

tfe/fep 

Pad -He Deflector 

N 

Fluid 

4 

1 

! Quick Disconnect 

i 

1 LSC-310-311 

1 

Kynar 

Impact Poppet Seal 
He Servicing 

M. -Failure of 
Quad. Check 
Valve 

Vapor 

4 

2 

1 

i Quad. 'Jieck Valve 
1 

Nitroso 

Impact Poppet Seal 

M. -Failure of 
Erc^ellsnt 

Vapor 

8 


! LSC-310-306 

I^ar 

Sliding Shaft Guide 

M.-Tank Bladder 

Vapor 

4 

2 

1 

! Relief Valve 

I 

i LSC- 310-307 

Teflon 

Ic^ct Seal 

M. -Failure of 
Burst Disc 

Vapor 

4 

1 

1 

I 

l^nar 

Sliding Shaft Seal 

— 

Vapor 

4 

— 

2 


' j I i 

i Vent/Prppellant Kynar Inqiaot Poppet N | Liquid i 4 2 

Coupling j^g^33^Q^401 “ ^2°4 Servicing > j ^ ^ 



TABLE 4.2-1; (Cont’d) 


r 


! j\irD 

j ir:".ii:7:cAiTc:; 

i'^lA .Jiii X Ai-i 

APPLICATION 

;-:oTE 
i:C?i’4AL OR 
SIKuIi: l/ALFu?ICTIO:C 

! 

1 

j Solenoid Valve 

Teflon 

Impact Seat 

N 

LSC-310-403 

( 

i 

RTV -30 

Solenoid Potting 

M, -Failure of 
Seal Weld 

t 

' RCS Bigine Valve 

1 

Teflon 

Impact Seat 

N 

Lsc- 310-130 



Lacquer 

(34250,248; 

Coll Insulation 
Potting Conq)ound 

— 

M. -Failure of 
Wield 

— 


! Pressure Transducer 

! 

i Lsc-360-601 


Glass 

( 0 . 


Vacuum Seal Joint 
For Vfire Feed Hiroughl 


^oxylite- V7et Winding Agent 
6203 J For Sensor Coils 
(O.lgms estji 


M, -Failure of 
Bourdon TUbe 


M, -Failure of 
Bourdon Tube 


I 



Polyester 
per Itil 

- 1-631 

( 0 . 00019 ns 

est^ 

Coil Spacer 

M.-Ftiilure of 
Bourdon Tube 


Polyester 

Film 

Coil Insulator 

M. -Failure of 
Bourdon Tube 


Acrylic 

'.dhesive 

j[0^^a5fiL« 

bj. .. 



I 


Liquid 4 1 

Liquid Incccq>ajblble 



Liquid 



Liquid 


I 

I 


Incooipatible 


Liquid 


Incomp^lble 






















TABLE h.9-2; LM APS OXIDIZER SIDE NON-METALLIC MATERIALS LIST 


O'- 

iil.D 

yiATI,F,i;JL 

APPLICATICi; 

MCLF 

OF 

•SINGLE I4AL?Uj;CTIC 

TYPE 

OP 

; CONTACT 

CCr-^ATIPI 

oiO'lAi j. 

REPS. (?F 

Lixi 

on a 
PA -.8) 


STATIC 

i:-!?ACT 

GKidizsr Tank 

Teflon- TFE 

P.L.D. Primary Paco 

N 

Liquid 

4 

1 



^al (jacket ) Static 





LSC -280-70- 5 








Butyl 

F.L.D. Secondary Seal 

M.-Fail\ire of 

Vapors 

10 



Rubber 

Static 

Primary Seal 





B591-8 







Butyl 

Bleed Port Static 

N 

Vapors 

10 



Rubber 

Seal Washer-Tank 





1 

B591-8 

Cover 





Ten^jeraturc Transducer 

Monsanto- 

Heat Transport Pliiid 

. 

M, -These cateriali 

Liquid 




05124 

Mixed with Alxsninum 

are ci^osed to 




LSC- 360 - 605-303 

Mixed 

Power 

fluid only upoi 

i 




Isomeric-5 


«q?tJBreof -the 





Ring 


outer case 





Polyphenyl 


which is 304 


• 



Ether 


stainless stee 





(l.Ogms esiij 






EJ)oxyllte 

. 

Sv^rport Fiberovis 






6203 

Asbestos 

M. 

liquid 




(4,0gms est) 







Bondmaster 

Potting CooTOimd 

M. 

Liquid 




M773A/B 







(8.0g^ est)j 






Fiberous 

Cushion For Ceramic 






Asbestos 

Element Tube 

M. 

Liquid 






I 



TABLE lt.2-2; (Cont*d) 


f 


I 


I . 


I 


'^OlJlPCinil'JT- KAI-ffi 
AIID 

IDKeiFICATlOII Fl:-SSR 

YiATEBIAL 

APRLICATIOi: 

TenQperature Transducer 

LSC-36O-605-303 

Solder 

Glass 

(l.Ogms eet] 

i 

1 

Inculator-ELement Wir< 

1 


Ceztunlc 

Tula 

(10 gms eat] 

1 

! 

t 

1 To Construct ELement 

! 

1 

1 

■ 

Vsfglass 
Slee^rlng 
(O.OOO 310 H 
est ) 

Insulator-Feed Wire 


Teflotx 
Shrink Tubq 
^.OOOOlgn 
est ) 

Insulator/ Strain 
Relief 

i 

1 

1 

i 

1 Teflon 
' Jacketed 
; Cable 1 

; (30gms est ) 

Wire-Mil-W-l 6878 / 4 A' 

i 


MOLE 

TYRE 

NORl'^AL OR 
SDIGLE iJiALFuliCTIC 

OF 

'I CONTACT 

M. Tliese material 
are esqiosed to 
fluid only 
i^n nature 

> Liquid 

of the outer 
case which is 
304 stainless 
steel 


M. 

Liquid 

M. 

Liquid 

M. 

Liquid 

i M. 

i 

1 

i 

j 

i 

1 

Liquid 



I 










TABLE lu2-2; (Cont»d) 


l, 


ccMPOir.::::? 

iU:D 

i 


AH-LICATZO:; 

— 

MODS 
KOIvI/JiL OR 
■GIEGLE t^ALIll'CTIO 

TYPE 

OF 

; CONTACT 

CCMPATIBILiri 
jSFS. (rAi-A ^.b) 

STATIC 

Il^rPACT 

1 

Pressure Relief Valve 

Teflon 

static Burst Disc Seal 

N 

Vapors 

4 


LSC- 270 - 717-15 

Teflon 

Sliding Cap Seal 

M 

Vapors 

4 

2 


Nitroso 

Static Seal 


Vapors 

8 


i 

1 Fill and Test Usconnecti 

Teflon 

Impact Boppet Seal 

N 

Vapors and 

4 

2 

1 




Liquid 

4 

2 

i LSC- 27 O- 8 I 3 - 25-27 







1 (%uad. Check Valves 

Teflon, FEP 

Itupact Poppet Seals 

N 

Liquid 

4 

2 

1 LSC- 270-817 

Teflon, FEP 

Impact Poppet Seals 

M 

Vapors 

4 

2 

PressTire Transducer 

Glass 

Vacuxan Seal Joint for 

M 

Liquid 

Compat 

Lble 


(O.lgtn est) 

Wire Feed Through 





LSC-360-601 








E^poacyllte 

Wet Winding Agent for 

M 

liquid 

Incoisp 

itlble 


6203 

Sensor Coils 






(o.lgm est] 







Polyester 

Coll Spacer 

M 

Liquid 

Inconp 

.tlble 

i 

Per MU-I- 






! 

631 






i 

(0.001 gm 






I 

1 

est ) 

■ 



























TABLE U.2-2; (Cont'd) 


a::d 

ID?2^TIFICATI0N NLIEEB 


MATE?.I/i ArPLICATICH 


MOi il'l TYPE 

KOPGVJi OP OF 

SIIiGLE ’^FUTfCTIO'J CONTACT 


ccMrATiPiLirr 

REJ'G • ( i’/c j\ . 8 ) 


TATIC 1 i;eact 


Pressure Transducer 


LSC-360-601 


Loctite 

!(0.00001 OTi I 

est ) ' 

Polyester Coil Insulator 
Film 

Acrylic Adhi (sive 
I Adhesive 
I Tape 

i0«00lgm est) 


Liquid 


Liquid 


Absolute Pressure 
Transducer 

LSC-360-624-1 


£poxy-'BR6ld Litemal Ccnqionents to 
(S.Ogns est) I Outer Shell 

Silicone ! 

Strain i 
Gages I 
(O.lgm est)‘ 

i 

Ceramic 
(l.Ogm est) 

Glass I I 

(0,2gm est ) ! 


Liquid 


Liquid 


Liquid 


Liquid 


I 
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TABLE h,S-P; (Cont'd) 


T^A'ri'* 

AID 

ii:;'::;Ti?tCATio:: uii-xnR 


EropeHant Level 
Detector 

Lsc- 270-801 


Explosive Flow Valve 

LSC-27O-819-9-7A 



Teflon 


Buna-N-Type 
-I .01 lbs. 
Maga Filler 

I 

RTV-20 
Potting 
.021 lbs. 

Stycaat 109( 
Cat. 11 
.007 lbs. I 


Butyl 

B-318-7 


Fill and Test Disconnects Kynar 
LSC-270-805-2 Kynar 


/J-PLICATICN 

MODE 
r:opi4Ai OP 
SIEOLE MALFm’CTIO 

TYPE 

OF 

^ CONTACT 

Internal Components 

M.-lheae materiali 
are exposed to 
fluid only 
upon rtpture 
of the outer 
case, which is 
347 stainless 
steel* 

Liquid 


M. 

Liquid 


M. 

Liquid 


M. " 

Liquid 


Mw 

Liquid 

Redundant Seal 
(l^otechnlc) Static 

M,-0nly in Post 
Fired Condition 

Liquid 

Inpact- Poppet Seal 

N 

Liquid 

Secondary Sliding Seal 

M 

Liquid 


CC:.1?ATIBILI-IY 
IWFOI-J.IA'TIC:.' £•, 
REFO. (PAPA 4.8) 


STATIC I I.VTACT 















n-n 


1 

1 TABLE 4.2-3; LM DPS OHDIZER SIDE NON-METALLIC MATERIALS LIST 

1 

cciipoii:-::!!' 



MOLE 

TIPE 

CCNiFATIr.ILiri 

iMID 

MJiTERIAL 

APPLICATION; 

KC3!/Ja. OR 

01' 

PEPS, (r/ 

S^A 4.6) 

IDSKTI?ICATIO:i rrt'J.SER 




'I CONTACT 





STATIC 

i:-!?ACT 

IM d/s CKldlzer Tank 

— 
Teflon- TFE 

Seal-Gland Static 

N 

Liquid 

4 


LSC 280-4 

Teflon- TFE 

Raco Seal Jacket 
Static 

N 

4 


Liquid 

t 

Rulon A 

Level Sensor Support 
Static 

N 

Liquid 

n 



Teflon-TFE 

Diffuser Seal Static 

K 

Liquid 

4 


! 

Nitroso 

Diffuser Seal Static 

M 

Liquid 

8 


1 Propellant Quantity Gaglnf 

Rulon A 

Tank Mount to Probe 

N 

Liquid 

11 


1 System 

.26 lbs. 

Insulator Static 




LSC- 270-00009 

i 

i 

Teflon 

Flange Lining Static 

N 

Liquid 

4 


: 

Teflon 

Wire Cover Static 

N 

Liquid 

4 


1 

.055 lbs. 





! 

Glass 

Ptortion of Herra. Seal 

M 

Liquid 

Ccanpa 

iible 

1 

1 

Stycast 1090 Electronic Potting 

M 

Liquid 

Incompatible 

1 

.3 lb 

RTV 20 
.017 lbs. 

Potting Compound 

M 

Liquid 

Incod] 

)atible 

1 Solenoid Latch Valve 
(Lunar Dump) 

Teflon 

Impact Seat 

N 

Vapors 

4 

1 

t 

i Lsc- 310 - 403-305 

RTV -30 

Solenoid Potting 
Compound 

M.-Case Failure 

Vapors 

Incom]|)atible 

] 

1 
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TABLE i:.2-3; (Cont’d) 


cc:'iPG:^L::T name 

1 


MODE 

TYPE 

CCMFATIEI 

IIIFOi-MJV'ri 

.ITY 
'■.! £: 

AliD 

yjlTELIAL 

APrLICATICi; 

KOK'i/iL OR 

OF 

FJ2FS. (I-/ 

J-A 4.8) 




. SINGLE MALFdl-ICTIO 

CONTACT 


iCAi'iOi'I 1< ci'IiJi'-h 



STATIC 

r.CPACT 



Squit Valve 

Butyl 

Redundant Seal 

M.-Cnly in Post 

Liquid 

6 



B318-7 

T^otechnic-Static 

Fired Condition 




LSC-270-819 







Qvtad. Check Valves 

Teflon, FEP 

Impact Bcppet Seat 

N 

Liquid 

4 

1 

LSC-270-817-3 

Teflon, FEP 

Impact Poppet Seat 

M 

Liquid 

4 

1 

Coupling Manual 
Disconnect- Propellant 
Servicing 

Teflon 

Impact-Sliding 
Poppet Seal 

N 

Liquid 

4 

1 

LSC-270-802 

— 

Teflon 

Secondary Sliding 
Seal 

M 

Liquid 

4 

1 

Relief Valve 

Teflon- 

FEP 

Lopact Poppet Seat 

M 

Liquid 

4 

1 

LSC-270-818-5 







IQmar 

static Filter Seal 

M 

Liquid 

4 

2 

Covqpling-Qiiick 

Disconnect 

Teflon 

Impact Poppet Seal 

N 

Liquid 

4 

1 

LSC-270-813 

— 

Teflon 

— 

Secondary Sliding 
Seal 

M 

Liquid 

4 

1 

i 

» 

V 

1 


^ 
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TABLE 4.f?-3; (Cont'd) 




gg;.e>c::z::t ija;-s 

AIX 

MATERIAL 

. 

APFLICATIC:! 

MCLE 
NORMAL OR 

TYPE 

OF 

.T nATvTfTlAPm 

cc;.iFA'riBiLin' 
INFOI-MATIC:; £: 
REFG. (PARA 4,8) 

icei^tificatiom ulg.iber 





STATIC 

IMPACT 

! 

1 Descent Engine Oxidizer 
Inlet Line 

1 

Teflon 

" 0 " Ring Static 
Flange Seal 

N 

Liquid 

4 


I TRW 108611-5 







Oxidizer Duct 
TEW 108621-6 

Teflon 

" 0 " Ring Static 
Flange Seal 

N 

Liquid 

4 


Flow Control Valve 
TRW 401574-4 

Nitroso 

Downstream Static 
Flange Seal 

N 

Liquid 

8 



Teflon 

Upstream Static 
Flange Seal 

N 

Liquid 

4 


Flow Control Valve Elbow 
TRW 402614-4 

Nitroso 

I 4 >st.ream Static 
Flange Seal 

N 

Liquid 

8 



Teflon 

Downstream Static 
Flange Seal 


Liquid 

4 


Plow Control Valve Pintle 
Shaft Seals 

Nitroso 

Sliding Seal's 

N 

Liquid 

8 


■ " 1 

Element Assembly 
1 TEW 111381-5 

'1 

Teflon 

Support Ring Sliding 
Bearing 

N 

Liquid 

4 

1 

j_ — 

j Oxidizer Shut Off Valve 
i TRW ao46i9-8 

Teflon 

: 

i 

1 

Ball Valve Sliding 
Seal 

N 

Liquid 

4 

— 

1 
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TABLE 4 . 2 - 3 ; (Cont'd) 


I 

cc;.!?oini;:cT iiai-e 


1 

MODE 

TIPS 

Airc 

:.'A'Ti:-;ZAL 

>'J"PLICATIOR 

or 

OF 

irsiTiFicATic:; fe-gzh 



• SIECIE MALF'JNCTIO 

^ CONTACT 

Oxidizer Tank 

Mixed Iso- 

Heat Transport Fluid 

All Ccmponents 

Liquid 

i Ten^erature 

meric 5 


are internal to 

i Transducer 

Ring Italy- 


outer stainless 


LSC-360-605-303 

phenyl 


steel housing. 


Ether 


Ipon its failure 


1 

(l.Ogms esb) 


internal com- 
ponents will be 
exposed to liquid 
and malfunction. 



i^joxylite 

Support Fiberous 


Liquid 

i 

6203 

( 4 . 0 gms est 

Asbestos 

tf 



Bondmaster 

Potting Compound 

tt 

Liquid 


M 773 V® 
(S.Ogms est) 





Fiberous 

Cushion for Ceramic 

ft 

Liquid 


Asbestos 
(2.0gms est) 

Element Tube 




Solder 

Insulator Element 

ft 

Liquid 


Glass 

(l.Ogms est) 

Wire 




Ceramic 

Construction of 

II 

Liquid 


Tube 

(lO.gms est) 

Element Assembly 




CC:. 5 >ATIBILITY 

h. 

FEES . ( PARA 4 . 8 ) 


STATIC 


i:- 3 >ACT 








ix-n 


I TABLE 4 . 2 - 3 ; (Cont'd) 

i 


COMJ'OL'/.l.'T NAIiE 
AND 

ILITiTIPICATIO:; NllGEK 

■ 

MTERIAL 

APPLICATION 

MODE 
!-: 0 ?P!AL OR 
SINGLE I 4 ALFUKCTI 0 

CKldizer l^nk 

Varglass 

InsiiLator; Feed Wire 

lU coD^onents 


Sleeving 


are internal to 

Tenq)erature Transducer 

LSC-36O-6O5-303 

(O.OOOOlgm 

est) 


outer stainless 
steel ho\ising. 
Upon its failure 
internal com- 
ponents will be 
e 3 q>osed to liquid 
and malfunction. 


Teflon, R 

Insulator Shrink 

It 


(O.OOOOlgni 

est) 

Tubing 

• 

i 

\ - - _ _ 

Wire-Teflon 
Jacketed 
[30gms est) 

M 11 -W. 16878 / 4 A Wire 

« 

' 

I 

1 Absolute Presstire 

it>oxylite- 

Wet Winding Agent for 

All ccoq)onents ai-e 

1 Transducer 

1 LSC-360-6OI-XXX-3 

j 

. 

i 

6203 

(O.lgm est) 

Sensor Coils 

internal to outer 
stainless steel 
housing. l 4 >on its 
failure, internal 
contponents will be 
exposed to liquid 
and malfunction. 


Polyester 
Poms Mil- 1 - 

Coil Spacer 

11 


631-Type-G 




(O.OOOlgm eat) 

i 

, i 


TYPE 

OP 

CONTACT 


COMPATIBILITY 
INFOK-IATION 2 c 


KEFS. 

STATIC 


V PAKA 4 . 8 ) 
E'T^ACT 


Liquid 


Liquid 


Liquid 


Liquid 


Liquid 









911 


TABLE 4.2-3; (Cont'd) 


A1;B 

IDSIITIFICATIO;: i;u:.EER 

MATERIAL 

APPLICATION 

MODE 
NORMAL OR 

• SINGLE I.iALFTE-JCTIO ^ 

Absolute Pressure 

Glass 

Glass/Metal 

All ccD^onents 

Transducer 

LSC-36O-6OI-XXX-3 

(O.lgm est) 

Vacuum Seal 

ai'e internal to 
outer stainless 
steel housing. 
Upon its failure, 
internal com- 
ponents will be 
eiqiosed to liquid 
and malfunction. 

1 

i 

Loctite 

(O.OOOlgm 

est) 

Screw Sealant 

tr 

i 

i 

1 

Polyester 

Film 

Acrylic 

Adhesive 

Tape 

■ Coil Insulator 

It 

i:bsolute Pressure 

Fpoxylite 

Base Coat on Diaphragm 

All materials 

Transducer 

6203 

and Bonding Agent for 

listed here are 

LSC-36o-624-xxx-e 

1 

(5.0gms est 

) Silicon Strain Gages 

internal to 
diaphragm. Failure 
of ^dilch exposes 
these non-eietallic I 
to liquid. 

! 

Silicon 

Strain 

Geiges 

4 Bonded to Diaphragm 

If 

f 

(O.lgm est) 

L- ■■ ■ 



s 






















4.3 AEROZINE-5-’ (A-50) 


A review of the non-metallic materials normally exposed to the propellant fuel in 
RCS, APS and DPS (See Tables 4.3-1, 4.3-2 and 4.3-3, respectively) indicate that 
Teflon, Kynar, . Ethelyene Propylene Rubber (EPR) and Butyl Rubber are usel. Teflon 
is used in static, sliding eind impact seals. Kynar is used in sliding and impact 
seals. However, with the exception of the RCS quad check valves and descent pilot 
valve^it is limited to operation in the test/servicing quick disconnects. Butyl 
rubber is used in static and sliding seals and as an Impact seal in the RCS quad 
check valve. This check valve sees only helium and A-50 vapor, since the fuel is 
contained within a Teflon bladder. EPR is used in static, sliding and intact seals 
in the ascent and descent propulsion prevalves and pilot valves. 

Impact data at up to 70 ft-lb (limits of test) indicate no reaction in A-50 for 
Kynar (Reference 5)* Because A-50 is not considered mechanical shock sensitive 
(Reference 6), this type evaluation is not normally conducted on exposed materials. 

Other than component and system tests, no Impact data are available for Teflon,EFR 
and Butyl rubber. 

Available data indicate that ull four materials are compatible with the fuel at 
normal operating tenperatures . In addition, system level tests have indicated no 
problems with these four seal materials. 

Recent tests conducted at Atlantic Research indicate that fuel vapors can be ignited 
as a monopropellant at approximately 450*^, and the liquid becomes a monopropellant 
at approximately 550°F. Teflon and EPR exposed in these environments did not affect the 
reaction temperatures . Data on the effects of Kynar, or Butyl rubber in these 
environments are not available. 

Non-metallic materials used in electro-mechanical devices such as the Propellant 
Quantity Gaging System, Temperature Transducer, Alsolute Pressure Transducer, 

Solenoid Valve, and Engine Solenoid Pilot Valve require a structural metal case 
failvire to ejpose non -metallic conponents of the electrical system to A-50. Upon 
ejposiire, these non-metallic materia3.s would be attacked by the A-50 at normal 



U.3 coat'd 


tenperatures and cause leakage through the device. These materials are identi- 
fied in Tables U.3-1 through ^-3-3. No inqpact or elevated temperature reaction 
data on these materials exposed to A -50 are available. However, as previously 
stated, the fuel i':self oeccoes a moaopropellant at tenperatures of 45 O and 
550 °f for vapor and liquid respectively. 

Material caapatibility testing references shown in Tables ^-3-1, -2 and -3 
are presented in Bara. ^.8. The ■aterlala are compatible with the fluid for 
static or impact conditions as deaonatrated by the references. leedcs throu^ 
transducer metal cases Into areas ihere no coe^tlblUty refereiKe Is shown >* 
are Intended to Indicate that: l) no data are available, and 2) the generic 

type materials exposed In this area are generally attacked by the fluid. 
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TABLE 4.3-1; LM RCS FUEL SITE NON-METALLIC MATERIALS LIST 


r 


i 


Ai.'i; 

ILZ;:':'IF1CATI0L' icl^oer 

MATERIAL 

APFUCATIOI'I 

MODS 

iiok:/j\l or 

• SINGLE KALFUKCTIO 

I 

Fuel 

Oxidizer Tank 
LSC -310-405 

1 

Teflon 
TFE & FEP 

Teflon TIE 

Teflon 
TFE & FEP 

Expulsion Bladder 

Spacer -Top Of Stand -Pip 
Gasket -Static Base Cove 
To Tank 

Vent Line -Strings 
Pad -He Deflector 

N 

! N 
r 

N 


Quick Dlaconnect 
LSC -310-311 

Kynar 

Impact Poppet Seal 
He Servicing 

M - Failure of 
Quad Check Valve 


Quad Check Valve 
L8C -310-306 

; 

Butyl 

B591-8 

Kynar 

Impact Poppet Seal 
Sliding Shaft Guide 

M - Failure of 
Propellant 
Tank 

M Bladder 


Vent/Propellant Coupling 
LBC 310-401 

Kynar 

Impact Poppet Seal - 
NgOj^ Servicing 

N 


Solenoid Valve 
LSC-310-403 

1... . 

Teflon 
RTV-30 
1 gin 

Impact Seal 
Solenoid Potting 

N 

M-Failure of Seal 
Seal Weld 

Relief Valve 
LSC -310 -307 

Teflon 

Kynar 

impact Seal 
Sliding Shaft Seal 

M Failure of 
Burst Disc 




COMPATIBILITY 
INF.,Iv-.*ATIO:: 5: 
RSFS. (FAIIA L.8) 

STATIC 


Fluid 

4 


Fluid 

4 


Fluid 

4 


Vapor 

Hi 

2 

Vapor 

12 


Vapor 

4 

2 

Liquid 

4 

2 

Liquid 

Liquid 

4 

Incompat 

1 

Lble. 

Vapor 

4 

1 > 


Vapor 

Vapor 


2 
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TABLE ; 4.3-1 (Continued ) 


CCMPOK-IIIT NA'-ffi 
AIID 

ILSHTIFICATIOIi Kl'.&ER 

MATERIAL 

1 

APFLICATICa 

‘ MODE 

kor! 4 /j:, or 

SINGLE MALFLIICTIO 

TYPE 

OF 

>1 CONTACT 

PCS Engine Valve 

Teflon 

Impact Seat 

N 

Liquid 

LSC -310-130 

Lacquer 

(3M250,248) 

Coll Insulation 
Potting Compound 

M Failure of 
Weld 

Liquid 


I Pressure Transducer Glass | Vacuun Seal Joint M Failure of Liquid 

[ LSC -360-601 (0.1 gtns esT;) For Wire Feed Through Boufdon Tube 


Epoxylite Wet Winding Agent For M Failure of Liquid 

6203 Sensor Coils Bourdon Tube 

(0.1 gms es 0 

Polyester- Coil Spacer M Liquid 

Per Mil-I- 
631 Type G 
(0.001 gms 

est) I 

Polyester Coil Ins\ilator I M Liquid 

Film - I 

Acrylic 

Adhesive Tape 

(0.001 gms 

est) 

Loctite M Liquid 

(0.00001 

gms est) 

I 


f 


I 


CCIIPATILILIIY 
REFS. (FARA 4,3) 
STATIC IMPACT 

4 1 

Incompal Ible 
Compatil le 
Incompal ible 


















i 

TABLE 4.3-2 

; LM APS FUEL SIDE NON-METALLIC MATERIALS LIST 

cc;.?g:i;:sT 

i\KD 

ir.ii;ii7iCAiiCN irL’;.33R 

MATL'I\IAL 

AFPLICATIOM 

MODS 
NOR24AL OR 
SINGLE MALFUNCTIO 

TYPE 

OF 

^ CONTACT 

CO.'.IPATIBILin: 
IKFORMATICTI S: 
IffiFS. (PAI-A 4.3) 

STATIC 

IMPACT 

1 Fuel tank 







LSC -280-70- ' 

Teflon-TFE 

P.L.D. Primary Raco 

N 

Liquid 

4 

1 

1 

1 


Seal (Jacket) 





I 

1 


Static 





1 

1 

Butyl Rubbei 

P.L.D. -Secondary Seal 

M - Failure of 

Vapors 

12 


I 

1 

B591-8 

Static 

Primary Seal 





Butyl Rubbei 

Bleed Port Static 

N 

Vapors 

12 


' 

B591-8 

Seal Washer -Tank 





i 

1 - 


Cover 





1 Temperature Transducer 

Monsanto- 

Heat Transport Fluid 

M These- 

Liquid 



! LSC -360-605 -303 

05124 Mixed 

Mixed With Aluminum 

Materials are 





Isomeric 

Powder 

Exposed to 





5 Ring 


Fluid Only 





Polyphenyl 


Upon Rupture 




1 

Ether 

) 

of the Outer 




! 

(1.0 gms es-t 

Case which is 




\ 

1 



304 





Epoxy llte 

Support Fiberous 

M Stainless Stee 

1. Liquid 




6203 

Asbestos 






(4.0 0ns es1 

) 






Bondmaster- 

Potting Compound 

M 

Liquid 




M773A/B 







(8.0 0ns esi 

) 






Flberous 

Cushion For Ceramic 

M 

Liquid 




Asbestos 

Element Tube 





! 

(2.0 gms est) 

: 






I 
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TABLE 4 . 3-2 (Continued) 


coMPOincrra iiai-e 
ai;d 

IL 2 ! 5 TI?ICATI 01 i KUffiER 


MATERIAL 


APPLICATION 


MODE 
NOK-IAL OH 
SINGLE MALFUNCTIOl 


TYPE 

OF 

CONTACT 


CC:C--ATI 3 ILI 7 jf 
INFOFJLMICII U 
REFS. (PARA 4 . 8 ) 


STATIC 


E-IFACT 


Temperature Transducer, 
LSC -360-605 -303 (Cont ' d) 


Solder Glasi 
(1.0 gms esi 


Insulator -Element Wire 

) 


Ceramic Tuba To Construct Element 
(10 gms est| 

[ 

IVarglass 
Sleeving 
(0.00001 
gms est) 


Insulator - Feed Wire 


Propellant Lever Detector 
LSC -270-801 


Teflon- 
Shrink Tube 
(0.00001 
gms est) 

Teflon 

Jacketed 

Cable 

(30 gms est 

Teflon 
Buna<Jf- 
Type-N 
Maga Filler 
RTV -20 
Potting 
Stycast 
■1090 


Insulate r/ Strain 
Relief 


-Wire-Mil-W- 

1687 / 4 A 


Internal Components 


M 


M 


M 


These 

Materials eure 
Exposed to 
Fluid Only 
Upon Rupture 
Of The Outer ■ 
Case Which is 
304 Stainless 
Steel 


M 


M 


M These Mater i alp 
H Are Exposed To 
Fluid Only Upoh 
M Rupture Of The] 
M Outercase, 

Which Is 347 
M Stainless 
Steel 


Liquid 

Liquid 

Liquid 


Liquid 


Liquid 


Liquid 

Liquid 

Liquid 

Liquid 

Liquid 











TABLE 4.3-2 (Continued) 


1 cc;.T^'o:rr;T :;aj2 

MA'IERIAL 

APPLICATIO:; 

MOPS 

1 j\i;d 

1 IDFL’TIFICATTCI-I IVJIOE.?. 
1 

IICP.MAL OR 
SiriGLE MALFUNCTIO: 

1 

Explosive Flow Valve 

Butyl -B- 

Redxmdant Seal 

M Only In Post 

LSC-270-819-9-7A 

318-7 

(Pyrotechnic) Static 

Fired Conditioi 

Fill And Test Disconnects 

Kynar 

Impact - Poppet Seal 

N 

LSC ^70-fi05 -2;-702 -1 

Kynar 

Secondary Sliding Seal 

M 

Pressure Relief Valve 

Teflon 

Static B\u*at Disc Seal 

N 

LSC -270-717-15 





Teflon 

Sliding Cap Seal 

M 

1 

Butyl 

Static Seal 



B591-8 



U- 


Fill And Test Disconnects, 

Teflon 

Impact Poppet Seal 

N 

LSC -270-813 -25;-27 




Quad Check Valves 

Teflon, FEP 

Impact Poppet Seal 

N 

LSC -270-817 

Teflon, FEP 

Impact Poppet Seal 

' 

M 


Pressure Transducer 
LSC-360-601 


Glass Vacuum Seal Joint 

(0.1 gms es'll)For Wire Feed Through 


Epoxlite Wet Winding Agent 

te03 For Sensor Coils 

(0.1 gms es-tj) 


Liquid 


Vapors 

and 

Liquid 


Liquid 

and 

Vapord 


COMPATIBILITY 

infor’.;atio:i & 

RZF3-. (PA3A 4.8) 


STATIC 


II^iPACI 
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TABLE 4.3-2 (Continued) 


COMPOL^'flT JJAI-E 
Aim 

ILEI'ITIFICATIOK NLI-SSR 

MATERIAL 

APPLICATION 

MODE 
KOrUl/iL OR 
SINGLE MALFUNCTIO 

TYPE 

OF 

I CONTACT 

Pressure Transducer 
LSC -360-601 (Cont'd) 

Polyester 
Per Mil-I- 

631 

(0.001 gms 
est) 

Coll Spacer 

M 

Liquid 


Loctite 

(O.OOOOlgms 

est) 


M 

Liquid 

» 

1 

Polyester 

Film 

Acrylic Ad- 
hesive Tape 
(0.001 gms 
est) 

Coll Insulator 

M 

Liqtdd 

Ia/S Engine PreValve 
1 LSC ^70-00822 

Ethylene 

Propylene 

Rubber 

Sliding/ Impact Seal 
E5I5-8 

N 

Liquid 

1 

! 

RTV 

Solenoid Potting 

M Case Rupture 

Liquid 

!a/S Engine Valve Package 
^ell 0258- 472225 

Teflon FEP 

Static Seal 

N 

Liquid 

j Ethylene 
[Propylene 

1 i Rubber 

i !E515-8 

E540-8 

Sliding /Static Seal 

N 

Liquid 


C0:t?ATI3ILITY 
II.’POIC-IATIC:} & 
HSFS. (PARA 4.8) 


STATIC II-EPACT 


Incomproible 


Incompiatible 


IncompKlble 













93"*l 
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1 

1 

TABLE 1+.3-3; 

IM DPS FJEL SIDE NON METALLIC MATERIALS LIST 



CCMFOIISirT I>AI.E 


1 

MODS 


CCMPATIPILm 

AIIL 

MATERIAL 

APPLICATION 

N0R2-IAL OR 

TirB 

OF 

infcp:.iaiio:i S: 

REFS. (PAPA L. 3 ) 

lEENTIFICATICK N11«13I:R 



SINGLE MALFUNCTIO 

I CONTACT 








STATIC 

IIEACT 

IM d/s Fuel Tank 

Teflon-TFE 

Seal Gland-Static 

N 

Liqu'd 

4 


LSC- 280 -Ii 








Tellon-TFE 

Raco Seal Jacket-Static 

N 

Liquid 

4 

- 


Rulon A 

Level Sensor Support - 







Static 

N 

Liquid 

11 

- 


Teflon-TFE 

Diffuser Seal-Static 

N 

Liquid 

4 

- 


Vlstanex 

Diffuser Seal-Static 

M 

Liquid 

8 

- 

Propellant Quantity Gaging 

Rulon A 

rank Mount to Probe 





System 

.26 lb. 

Insulator-Static 

N 

Liquid 

11 

- 

LSC- 270-00009 








Teflon 

Flange Llnlng-Statlc 

N 

Liquid 

4 

- 


Teflon 

Wire Cover-Static 

N 

Liquid 

4 

• 


.055 lb 







Glass 

Portion of Herm. Seal 

M 

Liquid 

Cos^atlble 


Btycast 1090Electronic Potting 

M 

Liquid 

[ncompatllj 

>le 


.3 lb 







RTV 20 

Potting Con^iound 

M 

Liquid 

Incom- 



.017 lb 




patible 


Solenoid Latch Valve 

Teflon [Impact Seat 

N 

Vapors 

4 

1 

(Lunar Duiip) 







ISC-3IO-U03-305 

RT'--30 

Solenoid Potting 

M-Case Failure 

Vapors 

Incom- 


i 

j 

pampound 

i 



patible 










83-n 


TAELS 4.3-3J (cont'd) 


1 

COM’Cin£JIT NAME 
AIX 

IZENTIFICATICN NIZGZR 

■ 

1 ■■■ 

APPLICATION 

— 

MODE 
K0K4AL OR 
- SINGLE MALFUKCTIO 

0 

0 

COMPATIBILIOT 
INFOPZ.'JiTION Sc 
REFS. (PARA 4.8) 

STATIC 

II-IPACT 

Squib Valve 

Butyl- 

Redundant Seal Pyro- 

M - Only in 

Liquid 

6 


LSC- 270-819 

B 318-7 

technic-Static 

Post Fired Condi- 







tion 




Quad Check Valves - 

Teflon-FEP 

Impact, Poppet Seat 

N 


4 

1 

LSC-270-317-3 

TefLon-FEP 

Impact, Poppet Seat 

M 


4 

1 

Coupling, Marual Dlscon- 

Kynar 

Impact -Sliding Poppet 





nect - Propellant 


Seal 

N 

Liquid 

4 

5 

Servicing 







LSC- 270-802 

Kynar 

Secondary Sliding Seal 

M 

Liquid 

4 

5 

Relief Valve 

Teflon-FEP 

Impact Poppet Seat 

M 

Liquid 

4 

1 

T^C- 270 - 818-5 








I^nar 

Static Filter Seal 

M 

Liquid 

4 

2 

Coupling-Quick Disconnect 

Teflon 

I^act^Pcppet Seal 

N 

Liquid 

4 

1 

ISC- 270-813 

Teflon 

Secondaiy Sliding Seal 

M 

Liquid 

4 

1 

T^S Eflgine-ISC- 270 - 00600 - 

Teflon 

"0" Ring Static 





2Y;29 


Flange Seal 

N 

Liquid 

4 

• 

Fuel Inlet Line-TRW1086ll- 

j 






Fuel Duct 

Butyl- 

"0" Ring Static 





TRW- 108621-6 

B591-8 

Flange Seal 

N 

Liquid 

12 

- 

Flow Control Valve 

Butyl- 

Downstream Static 

N 

Liquid 

12 


TRW 401574-4 

B591-S 

Flange Seal 






Butyl- 

Upstream Static 

N 

Liquid 

12 



B- 591-8 

Flange Seal 

L 

































TABLE 4.3-3; 

(contV) 


• 



CGIiPONK'IT NAME 
AJID 


APPLICATIOi; 

MODE 
KOKI-IAL OR 
SIKGLE yj\LFUNCTIC 

TYPE 

OF 

'I CONTACT 

cc:i?ATii-iLiry 
REFS. (PAPA i-.6) 

xCEiJTIFICATIO:; TO-IBSB 



STATIC 


Flow Control Valve Elbow 
Thrf 4026 i4-4 

Butyl- 

B591-8 

Upstream Static 
Flange Seal 

N 

Liquid 

12 



Butyl- 

B591-S 

Downstream Static 
Flange Seal 

N 

Liquid 

4 

- 

Flow Control Valve 
Pintle Shaft Seals 

Butyl- 

B591-8 

Sliding Seals 

N 

Liquid 

12 

“ 

> — ■ 1 

Element Assembly 
i THW 111381-5 

Teflon 

Svqpport Ring 
Sliding Bearing 

N 

Liquid 

4 

1 

1 Fuel Shut Off Valve 
TEW-C10469-8 

Teflon 

Ball Valve 
Sliding Seal 

N 

Liquid 

4 

1 

1 ■ ■ ' ' - ■ ■III-* 

1 IM d/s Engine Pre valves 
j LSC-270-.'X)600 

1 

1 

Ethylene 

Propylene 

Rubber 

Sliding/ Impact/Static 

Sea3 a 

E515-8 

N 

Liquid 

10 

- 

! 

} 

t 

Potting 

Compound 

S-5370 

Solenoid Potting 

H 

Liquid 

Incom- 

patible 

— 


1 ■ i 

IM d/s Engine Pilot Valve 

Butyl- 

SR634-7O 

static "0" Ring Seal 

N 

Liquid 

12 


i 

Ethylene 

Propylene 

Rubber 

Static "0" Ring Seal 
Static Seal 
E515-8 

N 

Liquid 

1C 


‘ 

Kynar 

Impact Seal 

N 

j .iquid 

4 

5 

1 
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TABLE 4.3-3; (cont'd) 


cc:2=cir£::T 

AI'ID 

ILLSTlFICATTOi: HU1.EEP. 


MATERIAL 


APPLICATION 


MODS 
IJORIOL OR 
SINGLE MALFlEiCTIOl 


TYPE 

OF 

CONTACT 


CCiFATIBILITY 
IRFCK-IATIOII 
R3FS. (PAPA 


STATIC 


E-IPACT 


Fuel • Tank 
Ten5>erature 
Transducer 

LSC-360-605-303 


Mixed Iso- 
meric 5 
ring poly- 
phenyl 
ether 

(l.Ogms est 
Enojylite 

6203 

(U.Ogms est 

Bondmaster 
M773 a/b 
(B.Ogms est) 

Fiherous 
asbestos 
(2.0gms est 

Solder Glas^ 
(l.Ogms est 

Cerami c 
tube 

(lO.gms est 

Varglass 
sleeving 
’O.OOOC'lgms ( 


Heat transport fluid 


Support flberous 
asbestos 


Potting Coii^ound 


Cu^ion for ceramic 
element tube 


liisula'oor-Element Wire 

Construction of element 
assembly 

I 

Insulator-feed wire 
st) 


All coa5)onents 
are Internal to 
outer stainless 
steel housing. 
Upon its failure 
internal compo- 
nents will be 
e^q>osed to llqul(^ 
and mailfanction 


Liquid 


Liquid 

Liquid 

Liquid 

Liquid 

Liquid 

Liquid 


I 


■p-ff’ 









TABLE 4.3-3; (cont'd) 


CCMF•C^’^J^:'L’ 1,‘AI'E 
AND 

IDrnJTIFICATICI! Nl^EER 


AI‘PI,ICATION 

y.av. 

KOiJ-b\L CA 
SIIIGLE .MALFUriCTIC 

OP 

! CONTACT 

COMFATTblLin’ 

(I’AiA 4.8) 

STATIC riPACT 

Fuel tank 

Teflon, P 

Insulator Shrink Tubing 

All con^onents 

Liquid 


Temperature 

(O.OOOOlgms 


are Internal to 



Transducer 

est) 


outer stainless 






steel housing. 




Wire-teflon 

M11-W-16878/4A wire 

Upon its failure 

Liquid 



Jacketed 


Internal con^o- 




(30gms est) 


nents will be 






exposed to liquid 






and malfunction 



Absolute Pressure 

Bpoxyllte- 

Wet Winding Agent for 

All con^onents 

Liquid 


Transducer 

6203 

Sensor Coils 

are Internal to 



ISC-360-601-XXX-3 

(O.lgms eat. 


outer stainless 






steel housing. 



i 

Polyester 

Coll ^acer 

U^n its failure 

Liquid 


1 

forms MIL-I-* 

Internal con^o- 




631-type<5 


nents would be 




(O.OOOlsms 


exposed to liquid 




est) 


and malfunction 




Glass 

Glass/metal 


Liquid 



(O.lgmt est 

Vacuum seal 




j 

Loctlte 

Screw sealant 


Liquid 



(O.OOOlgma 





\ 

est) 





f 

Polyester 

Coll Insulator 


Liquid 



film 




1 

: 

Acrylic 





I 

adhesive 





! 

tape 
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! TABI£ (cont’d) 

1 

CCMPOJEIT 

ai;d 

ir: 2 ;Ti?icATio:; :rr..T:SR 

MA'IERIAL 



APPLICATIOH 

MCLK 
NORMAL OR 
SINGLE MALFUNCTIO 

TYPE 

OF 

i CONTACT 

COMPATIBILITY 
INFOKM\TIC!I S: 
REFS. (P/JIA 4 , 8 ) 

STATIC 

IMPACT 

Absolute Pressure 

xylite 

Base coat on dlaphragi 

\ All materials 

Liquid 



Transducer 

6203 

and bonding agent for 

listed here are 




ISC-36O-624-XXX-2 

(^.Ogms est 

j silicon strain gages 

internal to 







diaphragm . Upon 





Silicon 

4 bonded to 

its failure 

Liquid 




strain 

diaphragm 

Internal con^o- 





gages 


nents would be ' 





( 0.1 gms 


ej^osed to 





est) 


liquid and 







malfunction 





Glass 

Metal/glasa seals. 


Liquid 




(0.2 gms 

Wire feed through. 





i 

est) 







1 













h.k OXYGEN 


Non-metallic materials used In greater- than-20-psla oxygen systems are defined 
as Category "D" and are identified through the CCMA.T System; these are 
sunnarized in Ihble h.U-1. Qualification for use in oxygen service Is based 
on assembly level off-llmlt and qualification testing in accordance vlth the 
GAC controlling specification, LPL- 521-2. Material application verification 
is provided through CTO tests which demcmstrate the suitability of the ?raterial 
in temis of service oxygen pressure. 


Ihree items (LSC-330-321, -390 and -505) have been identified as assemblies 
idiich utilize non-metalllc materials in high pressure oxygen dynamic applica- 
tions idiei%ln the material may be subjected to Inqact loading. Ihe non- 
metallics (Kel-F-8l, Teflon, Viton A, Viton B, and Krytox 2l»0 AC) were tested 
by the NASA^fSC Bower and Propulsion Division to determine their GOX conqati- 
blllty imder mechanical impact with 10 foot-pounds at ambient temperatures and 
2000 psla GOX pressure. The results of test, with 20 san^les of each material 
tested, indicated no reactions; ibis substantiated the suitability of the 
materials for use in high pressure oxygen systoas. Ibe Kel-F-8l poppet seal 
in the 321 Fill Coupling is the only dynamic application for iblch impact data 
at normal, or greater iban normal, operating pressure arc not available. However, 
the dynamic application of this material occurs only during ibe oxygen fill 
cycle. 

Ihe oxygen qualification tests referenced in Table h.4-1 and mentioned above 
demonstrate the suitability of the non^netalllcs used under conditions of no 
impact loading (static). Additionally, NASA has LOX or GOX impact test data 
available for all but three materials. Sandies of the materials >dilch have 
not been tested have been sent to WSTF for testing. 

Ihree pressure transducers can, as a result of a slxigle-polnt structural 
failure, expose non-metallics to hi^ pressure GOX. Ihe subject transducers 
meet the following requirements: 

o All sensors in absolute pressure transducers are leak cheeked at I .5 
to 2 times their rated pressure 
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o The sensing elements have a burst pressiore rating of five times their 
rated pressure range 

o Proof pressure tests, during supplier and GAC PIT tests, demonstrate 
the integrity of the sensing element { calibraticm is performed after 
proof -pressure tests 

o Proof pressure tests exceed system usage operating pressure range 

Should a rupture/leak of the sensing element occur, a) the reference chamber 
vill contain tuo times rated reinge or 5j000 psia whichever is lower, (redundant 
pressure vessel); b) additional metallic and non-metallic materials would be 
exposed to high-pressure GOX; c) the sensor electrical power elements will also 
be exposed to high-pressure GOX. 

In the event that a non-metallic is ccmsidered Category "D" as the result of high 
pressure GOX exposure due to a structural failure, it can be ccHiclijded that impact 
sensitive materials would be e:^>osed (the transducers contain mylar and Epoxylite 
6203, both having failed LOX impact tests). The ncaa-metallic materials exposed 
and the amount of material for the ECS pressing transducers (LSC 36O-60I and LSC 
36O-624) are shown in the DPS Oxidizer Table h.2-1. 

Certain other materials will be exposed to GOX pressures higher than normal 
operating pressures as a result of a single-point failure. These materials should 
be reviewed and be considered for GOX pneumatic and mechanical impact testing. 

Ignition potential of all materials used in oxygen is presently verified by a 
standard Flash and Fire test conducted under ambient pressure conditions. The 
effect on ignition potential of high pressures should be evaluated by tests. 
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TABLE 1*.U-1 

IW ECS SUBSYSTEM NON-METALLIC MAl'ERIALS LIST 


Component Name 

I'iSterlal 

Application 

Exposure Pressure 

(P?la) 

Impact 

Material Application Verification 

and Ident. Number 


Normal 

Single 




Conditions 

P^ilure 

Ihtn 


321 Fill Coupling 
D/S 

Kel-F. 8’. 

Poppet seal, dynamic 
application during fill 

3000 

. 

3000 

» 

LCft-330-02l/Purolator test 
procedure No, 2095 . 3000 psj^^^^ 

EA-UO 

Thread lock, static 

3000 

3000 


392 High Pressure 

E- 617-9 

" 0 " ring, static 

3000 

3000 


LCQ- 330 - 017 , 1500-2200 psla oxygen 

Oxygen Control 

Kel-F OR 3000 

Protective cover 

Vacuum 

3000 


blow-down; Parker System Integration 

Module 


seal, static 




Test No. 7EER5650072, 3000 psla 

D/S 

Teflon 

Back-up ring 
Static 

Vacuum 

3000 


oxygen. 

L-41*9-6 

"0" ring, static 

Vacuum 

3000 




LS-53 

"0" ring, static 

Vacuum 

3000 




I£-63 

" 0 " ring, static 

Vacuum 

3000 




Vlton-A 

"0" ring, static 

Vacuum 

3000 




L-604-7 

Casket, static 

Vacuum 

3000 




Krytox-240AC 

Lubricant, static 

Vacuum 

3000 



5®5 Interstage 

Teflon 

Seal, static 

950 

1000 


LCft-330-034/Falrchlld Hiller 

Disconnects 

Vlton- ' 

Dynamic during staging 
" 0 " ring, seal, static 
Dynamic during staging 

950 

1000 


Report No.ER- 3 i 8 -l 8.900 psla oxygen 


Krytox-24uAC 

Lubricant, static/ 

950 

1000 

# 




Dynamic during staging 

Note; 1/1-10 oxygc 

1575 

n. 



390 Oxygen 

Al. shim HS -025 

Spacer 

950 

950 


LCft-330-06l/sVHSER-4769 k 4958 

Control Module 

Teflon 

Back-up ring, static 

6.2 

950 



A/S 

Vlton-A 

" 0 " ring, static 

950 

950 


* 


Kel-F-8l 

Thread lock, static/ 
Valve seat, dynamic 

950 

950 

» 



ZZ-R -765 

'' 0 " ring, static 

950 

950 




Vlton B 

Valve poppet, dynamic 

950 

950 




PLV 2000 

Adhesive, static 

950 EVA 

950 


! 




6.2 cabin 

950 


1 


Molykote X-I 5 

Dry film lubricant, static 

950 

950 




SE 565 /Varox 

"0" ring, static 

950 

950 




Electrofllm 1C jO 

Dry film lubricant, static 

950 

950 




Epon 8/ Cat A 

Adhesive, static 

950 

950 




Krytox 240 AC 

Lubricant, static 

950 

950 


1 

... 






1 


* MSC COX Impact Eata. 50 ft-lh/ln^, 2000 pala OOX, Arab Oarap., 0/20 Reaction 
NASA LTR PD9-L51-69-PP6-L15*», Enclosure I., May 6 , I 969 


k.5 POTASSIUM HYDROXIDE 


Spillage of KDH frcm the IM batteries could occur In tw> different foms ; 
liquid or crystal. The liquid spillage vould occur during pre-launch, ^lle 
In the vacuum of space, the KOH would foiti KOH/water crystals. 

In the event of a liquid spill of the primary batteries In the ascent or descent 
stage, a variety of non-metalllc and metallic materials and ccnqiODents could 
possibly come In contact vlth the KOH. The materials most likely to come In 
contact with the fluid are: 

o Aluminum and titanium tanks 

o Anodize or alodlne aluminum boxes and cold rails 
o PEP/H-film wire harness 
o Silicone potting and harness clamps 

o Kynar/nylon solder splices and identification sleeving 
o Teflon-glass anti-chafe tape 
o Teflon-glass lacing cord 

o Polyolefin sleeving 

o Aluminized H-film thermal blanket 
o Glass-nylon standoffs . 

Table l4^.5-l presents KDH compatibility data for a cross section of primarily 
different generic type non-metalllc materials. These data Indicate that all 
the materials and/or components are compatible with the IG)H liquid except the 
vapor-deposited aluminum on the theimal blankets. The results of the spillage 
on the IM-3 blankets Indicated an 8-10 Inch area in idilch the aluminum was 
dissolved during a 1-2 hour contact. However, the exposed layer of H-fllm 
prevented further attack to the underneath layer. 

If a spill should occiur during fll^t, the liquid on contact with the space 
vacuum would have the following tmnediate effect. The water In the KDH would 
start to vaporize causing a cooling effect on the liquid; (V.P. 620^0 approx- 
imately 8 nia Hg) this would increase the concentration of ITOH (saturated 
solution). This ccnblnatlon wDuld cause the dihydrate (KDH-2H^0) to crystallize 
out of solution and form a solid phase in a saturated solution. Further cooling 
would produce a solid mixture of dlhydrates. 
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It must be assumed that -Oie crystals or particles from -Oie solution could fom 
In either caoposltlon. In the event that one or more touch some varm compon- 
ents, It Is reasonable to expect that the wter In the dlhydrates, or saturated 
solution, would boll and/or vaporize, thus approaching the original pellets. 
No compatibility problems would be anticipated with warm components and vapori- 
zing KOH particles, since contact would be of short duration and the materials 
shown In Thble 4.5-1 axe compatible. 

No compatibility problems are believed to exist during a pre-launch liquid spill 
except for the vacuum-deposited alvimlnum on the thezmal blankets. In addition, 
any battery spill In space vacuum would form particles of either undissolvea 
solids In saturated solutions or complete solid crystalline masses; neither of 
^ich present a compatibility problem. 
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TABLE 4.3-1 

BATTERY MATERIALS IDENTIFICATION AND KOH COMPATIBILITY 


APPLICATION 

1 MATERIALS 

REMARKS 


Ascent & Descent 

Explosive Devices 






Cell Case 

ABS 

Epoxy -Glass (G-10) 

In contact with KOH-con^atlble 

Battery Case 

Nickel Plated Magnesium 
(AZ31B) 

Gray Velvet coated 
EpoDQr-Glass (G-10) 

Nickel resistant to KOH ^lUa^e - 
Paint attached by KOH 

Separators 

Cellophane 

Cellophane 

In contact with KOH - compatible 

Separators 

Itylon 

- 

In contact with KOH - compatible 

Separators 

Rayon 

j 

In contact with KOH - compatible 

Cell Relief 
Valve 

ABS, Neoprene 

1 

Neoprene 

In contact with KDH - compatible 

Case Relief 
Valve 

Stainless Steel 

Stainless Steel, 
SR- 634-70 Rubber 

Partial contact with KOH - compatible 

Case Seal 

! Nitrile Rubber 

i 

i 

SR- 634-70 Rubber 

Partial contact with KOH - conpatible 
during relief or venting 

Intercell 

connections 

1 RT\^-7il 

- 

Partial contact with KOH - compatible 

Cell 

Terminals 

) 1 

RTV-601 

- 

Partial contact with KOH - compatible 

+ Plate 

Silver 

Silver 

In contact with KOH - compatible 

- Plate 

1 

Zinc 

Zinc 

In contact with KOH - compatible 
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TABLE 4.5-1 (cont’d) 


BATTERY MATERIALS IDENTIFICATION AKD KOH COMPATIBILITy 


APPLICATICN 

GENERIC MATERIALS EXPOSED TO KCH SPILLAGE 

REMARKS 

IM-3 Thermal 

Vapor deposited Aluminized 

Aluminum (1000-2000 Angstroms) 

Blahkeo 

H-film 

dissolved but H-film was resistant 


Aluminum 

Mild Etch 

1 

Titanium 

No chemical aitack 


Teflon 

■“•Compatible 


Kynar 

“•Compatible 


Silicones 

■“Compatible 


Epoxies 

■“Compatible 


Polyolefin 

““Compatible 


* Plastic Properties Chart, Modern Plastics Ency, I 968-1969 
** Rayclad Tubes Inc. 


4.6 TYPES OF EXTERML IM MATERIAIS HAMAGEa3 BY OXIDIZER TMJK COMTENTS 


LM materials external to the propulsion subsystems were not selected for 
compatibility with the propellant oxidizer (N^Oj^). However, in the absence 
of atmospheric moisture and in the presence of the space vacuum, available 
compatibility reports indicate the primary structural materials, aluminmum, 
stainless steel, titanium, nickel alloys, and low alloy steel are compatible. 
Many non-metallic materials, however, are expected to have a very limited 
life capability dependent on the concentration and temperature on the 
part. 

Table 4.6-1 lists the primary exposed external LM ib erlals including 

usage » "tioe to failure in liquid oxidizer, temperature at vdilch the failure 
occurs, and stage (ascent-descent) location. Vapor phase NgOj^ e:q)Osure data 
on non-metallic materials is limited and not available for most materials 
listed in the table. Materials listed in the table would probably be exposed 
to vapor in lieu of worst case liquid exposure, and the time to falliire in an 
actual mission would be considerably longer than that given in the Table 
4.6-1. Jfaterials listed in the table which fail in less than 24 hcurs, or for 
^ich ‘no data exists, have been evaluated as follows: 

o Materials li>:ted below are used in applications for which some N20j^ 

degradation should not prevent an abort -; 

- Epon 934 for wiring and instrumentation bonding 

- Mystic 7402 tape tubing wrjip 

- Kingsley aluminum ID tape 

- Marking ink 

- Corfil 615 edging compound 

- Velvet 400 series paint 

- DC l4l0 silicone sleeve anti chafe 

- Dodge fiber lEE/ciass tape 

- Teflon 62 3n tape spacer 

- Torque strip paint 

o Material listed below could be critical to an abort if exposed to 

N2O4. 

- Silicone cable clamp wire support - degradation could cause wire 
chafing and subsequent shorting of wiring. 
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- H-film pressure sensitive tape - degradation could cause blanket 
decay and loss of thermal properties. 

- Epoxy fiberglass laminate standoffs - failure could cause loss of 
the thermal insulation and micrometeoroid shields. 

- Nylon tie wraps and bases - failures could cause excessive strain 
on the wire bundles and possible shorting. 

- Nylon Velcro - failure could cause Insulation loss. 

- Kynar/Nylon solder and crimp wire splices - failure of the nylon 
could cause circuit failure. 

- EC 1663 potting - degradation could cause shorting conditions. 

- Epon 919 cabin pressure sealant - failure would cause cabin 
pressure loss. 

- Nylon/copper terminal lugs - failure could cause loss of grounding. 

The list of materials was compiled from photographs and vehicle inspection 
rather than a rigorous drawing review and should not be considered con- 
clusive. If compatibility of exterior surfaces were to become a 

program requirement an additional review and subsequent testing recommen- 
dations should be considered. It should be emphasized that a massive spill 
could be disastrous due to materials failures. The greatest concern with 
a spill would be with a relatively small leak \diich may go undetected for 
an extended period of time. 
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TABLE 4.6-1 


EFFECT 

OF LIQUID NoO. EXPOSURE 

ON EXTERNAL LM MATERIAI.S 


STAGE 

IM EXTERIOR MATERIALS 

- 4 

USE 

OXID. EFFECTS 
TIME TO FAILURE* 

°F TEMP 

DOCUMENT 

ASCENT (A) 
DESCENT (D) 

H Filjn/Al\imlntun 

Super Insulation 

7 Days 

70 

4 

a/d 

Epon/Fiberglass Laminate 

Stand-Offs 

1 Hour 

60 

1 

A 

Epon 919 

Cabin Sealant 

24 Hours 

75 

1 

A 

Epon 934 

Bond Wiring & 
Instrumentation 

24 Hours 

75 

1 

a/d 

I^nar/Hylon Solder Splices 

Wire Splices 

72 Hoxirs 

85 

1 

a/d 

I^ar/lferlon Crimp Splices 

Wire Splices 

72 Hours 

80 

1 

a/d 

Eymr/Hylon End Caps 

Wire Caps 

('2 Hours 

85 

1 

a/d 

TFE/Polyimlde (H Film) 

Wire Insulation 

Satisfactory 8 hrs. 


5 

a/d 

TFE Alpha Braided Cable 

Wire Chafe 

Satisfactory 

160 

2 

a/d 

Silicone Cable Clan^) 
(NE 4661) 

Wire Support 

1 Hour 

80 

1 

a/d 

Ifystic 7402 Tape 

Tubing Wrap 

1 Hour 

80 

1 

a/d 

Kingsl^ Aluminum ID Tape 

Infomation Labels 

ND 



a/d 

I^ar ID Sleeves 

Identification 

Sleeve 

72 Hours 

85 

1 

a/d 

lurking Inks (Black-Red) 

Marking 

24 Hours (Bleaches) 

80 

1 

a/d 

Corfil - 615 

Edging Compound 

NR 

60 

1 

A 
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T^BI£__4_t62l. (con't'd) 

STAGE 


114 EXTERIOR MATERIA1£ 

USE 

QXID. EFFECTS 
TIME TO PAIIURD^ 

TEMP 

DOCUMENT 

ASCEMT (A) 
DESCENT (D) 

TFE Glass 

Lacing Tape 

Satisfactory 

80 

2 

a/d 

Velvet UOO Series 

Paint 

Bleach 1 Hour 

80 

1 

a/d 

EC-1663 

Pitting Coeipound 

Unsat is Ikctozy 

75 

1 

a/d 

Milte Teflon Sheet 

Spacers 

Jatisfactory 

75 

2 

a/d 

Clear FEP (Teflon) Sheet 

Spacers 

Satis factozy 

160 

2 

A/d 

DC lUlO Silicone Sleeve 

Anti Chafe 

(Dissolves) 
24 Hours 

80 

- 

a/d 

Nylon 

Tie Wraps & Bases 

Disintegrates 
(24 Hours) 

60 

1 

A/d 

Dodge Fiber TFE/Glass 
Type 

Anti Chafe 

ND 

- 


a/d 

Dodge Fiber Unslntered 
TFE/Glass 

Connector Protection 

NO 

m 

- 

a/d 

Nylon/Copper Tenninal - 
Lugs 

Insulation for Grounds 

24 Hours 

65 

1 

a/d 

Black Shrink Fit 
Polyolefin 

Anti Chafe Insulation 

Cracks 7 days 

75 

1 

A 
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TABLE 4 .6-1 (cont'd) 


IM EXTERIOR MATERIALS 

USE 

Teflon Jacketed Wire 
(Blue, Green, Grey, 
Black, Wlilte) 

Wire Insulation 

Teflon 62 3M Tape 

Wire Bundle Clanp 
Spacer 

Teflon PluBiblng Clamps 

Attach Pluniblng 
Lines to 
Structure 

H Film Pressure 
Sensitive Tape 

Closure on H-Pllm 
Super Insulation 

Aluminum 6o6l 

H2O Tanks & Plumbing 

Inconel 718 

a/s GOX Tanks 

Zinc Chromate 

Primer - Anti Corrosion 

R(ylon/Velcro (Hook & 
Pile) 

Attach super Insulating 
blankets to structure 


OXID. EFFECTS 
TIME TO FAILURE* 

®F TEMP 

DOCUMENT 

STAGE 

ASCENT (A) 
DESCENT (D) 

Satisfactory 

60 

2 

a/d 

24 Hours 

80 

1 

A/D 

Satlsfactozy 

75 

2 

A/D 

24 Hours 

80 

1 

A/D 

Satisfactory 

150 

2 

a/d 

NR 

65 

2 

A 

ND 

- 

- 

a/d 

24 Hours (60°) 

80 

1 

A/d 
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IM EXTERIOR MATERIALS 

USE 

OXID. EFFECTS 
TIME TO FAILURE* 

°F TEMP 

DOCUMENT 

STAGE 
ASCENT (A) 
DESCENT (D) 

Red Torque Stripe Balnt 

Q.C. Seal 

Bleaches 1 hour 

80 

1 

A/D 

Butyl Heat Shrink Tubing 

Anti Chafe 

Incompatible 

60 

1 

D 

d 6-AC Steel 

d/s GOX Tank 

Satisfactory 

i4o 

2 

D 

Aluminum - 7075. 7079 

d/s Structure 

Satlsfhctory 

150 

2 

D 

Alumimmt - 2219, 7075, 
2024, 7079 

a/s Structure 

Satisfactory 

60 

2 

A 

Nylon 

Batt<Jry Teiminal 
Insulator 

Unsatisfactory 

60 

1 

a/d 


Documents Referenced: 

1. Con5>atiblity of Plastics With Liquid Propellants, Fuel emd Cscidizers, Plastec R^ort No. 25. 

2. Compatibility of Materials with Rocke^r Propellants and Oxidizers, DMIC Memo 201, 29 January 1965. 

3. Compatibility of Materials in Storable Propellants for XSM-63B and SM 68 b Third Progress Report ME. 
Report jjte2, 10 November 19*30, Martin Denver. 

4. IMO 510-155, 24 March 1969 Status Report: Concentrated Propellant Vapor Test on IM Thermal 

Blankets . 

5. CTE 39O-OO6 Wiring Qualification - 8 hour fuel and oxidizer soak. 

••*-Where data was not available on the specific material listed, oxidizer effects were based on 
material in the same generic family. 




k.7 SYSTEM PRESSURE RISE THROUGH (XWCBUSTION OF MON-METALLICS 


An analysis has been made to estimate the system pressure rise as a result 
of a structural single-point failure and ccmibustlon of the oon-metalllcs 
exposed as a result of that f&ilure. The follovlng components were included 
in this analysis: temperature transducers, absolute pressure transducers, 

RCS solenoid valve. Propellant Quantity Gauging System, and Propellant level 
Detector. 

o LSC 360-605 - Temperature Transducer 

- Assumption - APS Ullage Vol. l.Oft^ 

Expected Max. ^P - ITpsl 

- Assumption - DPS Ullage Vol. 0-94ft^ 

Expected Max. AP = 18 psl 

o LSC 360-62luXXX-2-Absolute Pressure Transducer 

- Assumption - DPS Ullage Vol. 0.94ft^ 

Ebcpected Max. AP = 6 psl 

- Assumption-ECS GOX Vol. 3ft^ 

Expected Max. ^P = 2 psi 

o LSC 360-601 Absolut* Pressure Transducer 

- negligible pressi’re rise APS, DPS, RCS and ECS 

o LSC 360-624-1-31 Absolute Pressure Transducer 

- Assumption - APS Ullage Vol. 1.0ft 
Expected Max. ^^P = 6 psi 

o LSC 310-403 Solenoid Valve 

- Assumption - RCS Ullage Volume 125 in 
Expected Max. ^^P=0.5 psl 

o LSC 27O-OOOO9 Propellant Quantity Gauging System 

- Assumption - DPS Ullage Vol. 0.94 ft^ 

Estimated Max. OP = 75 psi Itor Rulon A plus Tfeflon 

17 psi for RTV - 20 
175 psl for Stycast 1090 

o LSC 27O-8OI Propellant Level Detector 

- Assumption - APS Ullage Vol. 1.0 ft^ 

Estimated OP = 36 Psi 

All of the pressure Increases are expected to be within system capability with 
the exception of the Propellant Quantity Gauging System (PQGS). The RTV-20 and 
Epoxy require a structural metal case failure to expose these materials to the 



propellant Pereas the Rulon A plus Teflon are exposed to the propellant 
at all times. CcHublned pressure rises fbr all the materials in the FQGS 
coupled with tank operating pre'^jure of 24? psi would be enou^^ to exceed 
tank design ultimate of 1*05 ptx. However, with the possible exception of an 
explosive rise in pressure, the tank relief system would limit pressure rise 
to 275 psi. No methods of obtaining such an explosive rise are known. 

The pressure rise frao the PLD may be sufficient to fail the burst disc 
in the APS. Noxnal operating pressure of this system is 190 psi with the 
relief system opening at 226-250 psi. 

Pressure rise from the failure and conbustion of DPS temperature transducer 
materials may be sufficient to fail the burst disc in the DPS. Nbmal 
operating pressure of this system is 2^5 psi, with the relief system opening 

at 260-275 psi. 

All other items resulted in single pressure rises low enough to be within 
normal system capabilities. 

An additional analysis has been made to estimate the pressure rise in transducer 
chambers as a result of ccsabustlon of the non^netalllcs located in the reference 
chamber. Por the purposes of this analysis it is assumed that there is no 
\'enting of the gasses overboard throu^ electrical wiring potting or venting 
back into propulsion or GOX tank cavities. The calculated pressure rise is 
considered to be a minimum since the reference chan^rs also contain metallic 
items such as wiring ihlch occupy varying amounts of the assumed reference 
chamber volume. 

o LSC 360-605 - Temperature Transducer 
-Assiaaption 0.5 in Hef. Chamber Volume 
Expected /iP = 59,000 psi 

c IBC 36 o- 624-XXX»2 and -1-31 Absolute Pressure Transducer 

■3 

-Assumption 0.I8 In"^ Ref. Chaaiber Volume 
Expected AP = 55,000 psi 

o LSC 27O-OOOO9 Propellant Quantity Gauging System 
-Assumption l4 in Ref. Chamber Volume 
Expected oP = 1970 psi for RTV-20 

2C300 psi fjr Stycast 1090 
o LSC 27O-8OI Propellant Level Detector 
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Assumption 1 In^ Ref. Cbainber Volume 
Expected AF = 62,000 psl 
o LSC 3 IO-U 03 Solenoid Valve 

Assumption 0.6? In^ Ref. Chamber Volume 
Expected oP = 95 psi 
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4.9 DISCUSSION 

MSC uormetallic materials control for flamnability and toxicity is presently 
limited to the crew bay and the oxygen system. It would be desirable to 
implement an overall MSC criteria and control that would insvire that all 
materials used throughout the spacecraft were evaluated uniformly for all 
jdiysical and functional requirements. 
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5 . BURST TEST HISTORY 


5.1 SUMMARY 

Ibis section presents a description of all available burst test data for 
the IM i.'essure vessels. A discussion Is also presented on the Uf batteries 
and pressure/temperature transducers that Interface with the IM pressure 
vessels . 

For the most part, the only available burst data Is for hydrostatic failures. 
During developnent and q.uallflcatlon testing. It Is noznal practice to conduct 
burst tests hydrostatically Instead of pneiaaatlcally, even thou^dt the tank 
may ultimately be used pneumatically. Ibe prime consideration of the burst 
test Is to denonstrate that design burst pressure has been reached or exceeded; 
this can be demonstrated either pneumatically or hydrostatically. Since there 
is always the possibility that a tank may fail prematurely. It is desirable 
to conduct burst tests hydrostatically to facilitate a post-test failure 
analysis if regialred. Secondary considerations are lie facility limitations 
and danger In conducting pneumatic failure tests. 

Some pneumatic tank ruptures have been experienced during ihe IM program. In 
all instances, the failures were catastrophic in nature, with extreme frag- 
mentation of the pressure vessels. 

Table 5 . 1-1 sumiarlzes the burst test data for the IM pressure vessels. For 
reference purposes, the overall certification test requirements for the pressure 
vessels and associated components are suimnarlzed In Table ^.1-2. 

In general, it Is believed that if any of the IM pressure vessels were to fail 
In fll^t at, or greater them, design burst pressure, the tank would explode 
and fragment. Less catastrophic falliires could be expected If aqy of the tanks 
were to fall prematurely at, or near, normal operating pressure. Section 6 
presents a discussion of the anticipated failure modes and the resultant 
damage potential. 
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TABLE 5.1-1 PRESSURE VESSEL BURST HISTORY 


_ _ , _ ^ .. . 1 


DESIGN BURST 

ACTUAL 

BURST 

HYDRO 


PRESSURE VESSEL 

PRESS. 

PSIG 

TEMP 

°F 

PRESS. PSIG 

TEMP °F 

or 

PNEUM 

ADDITIONAL TEST DATA INFORMATION 

DPS Propellnnt 

405 

AMB 

DVT - 415 

AMB 

H 

0 cycle test to failure; cycle pressure 

T«nks (Oxid. & 



QUAL - 4u' 

AMB 

H 

was 15 to 310 PSIG; Hj-O filled tank 

Fuel) 



COMPAT- 440 

97 to 110 

H 

ruptured 3,384th cycle; min. req. was 
400 cycles. O- 27 O PSIG. 







0 Tank failure at I 80 PSIG, pneumatically 







caused by aluminum cover failure. 

Changed to Titanium cover for correction 







0 Tank failure during proof at 267 PSIG. 







Failure due to a localized microstructure 

i 






abnormality. (See para. 5.2.1 for 
additional discussion) 

DPS SHe Tank 

3420 

140“ R 

3512 

i4o“r 

p 

Tank ruptured at 3 >512 PSIG and burst at 

Internal Heat 



3425 


p 

3 >728 PSIG. AiResearch report QTP 900152 

Exchanger 





Rev. 1 Tank Serial No. 12 3/3^67 

DPS AMB He Start 
Tank 

2625 

100 

3100 

64 

H 

GAC test anomoly on LM-5 at I 605 PSIG; 
temperature was 173°F. Max allowable 







temperature is l40®F. Acceptable Ref. 
PGAE 4250 

APS Propellant 



QUAL - 452 

A^^B 

H 

Tank failed after 4? hours of test at 

Tanks (Oxid. & 

375 

AMB 

Updated tank 



245 ±5 PSIG during compatibility testing 

Fuel) 



QUAL- 494,478 

AMB 

H 

of N 2 O 4 . The falliu*e resulted from 




COMPAT-558,512 

100 

H 

stress corrosion (See para. 5-3. 1 for 




DVT - 465 

AMI^ 

H 

additional discussion) 

i 




COMPAT -245 ±5 

103 

H 













TABLE 5«1-1 (continued) 



DESIGN BURST 

ACTUAL BURST 


PRESSURE VESSEL 

PRESS. 

PSIG 

TEM? 

»F 

PRESS. PSIG 

TEMP “F 


APS He Tank 

5250 

160 • , 

5,740 

5,500 

160 

160 

H 

H 

RCS Propellant 
Tanks (Oxid. & 
Fuel) 

375 

100 

QOAL, Oxid 

767, 775 

QUAL, Fuel 
589, 622 

70 

70 

H 

H 

RCS He Tanks 

5250 

130 

5,700 

5,800 

130 

130 

H 

H 

ECS d/s Oxygen 
Tank 

4500 

160 

QUAL - 5400, 

5350 

DFT - 5400 
Overstress - 

5200, 5500 

Prod. Accept 

3000 

66 

66 

66, 74 

H 

H 

H 

H 

ECS A/S Oxygen 
Tanks 

1500 

160 

QUAL - 2010 

- 2070 

DFT - 2180 

- 2150 

75 

75 

160 

75 

H 

H 

H 

H 


wwww w w w w aw a a aa 


ADDITIONAL TEST DATA INFORMATION 


In production ecceptance test, a tank 
failed at 3,000 PSIG (FA 1001 ) ; failure 
was attributed to a crack in the tank 
material. Stress corrosion created by 
immersion in HoO dtiring testing and 
inspection methods had not 
detected crack. Inspection methods re- 
vised and H2O immersion removed from test 
procedure (Ref. para. 5.5.1 for additional 
discussion) 











TABLE 5*1“1 (continued) 
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PRESSURE VESSEL 


ECS D/s Water 
Tanks 


I 


DESIGN BURST 


PRESS. 

PSIG 


96 


1 ECS A/s Water 
Tanks 

EPS d/s & a/s 
P rimary Battery 


TEMP 

“F 


10.7 


70 


70 


20-145 


ACTUAL BURST 


PRESS. PSIG 


DFT - 262 


DFT - 314 


TEMP 


70 


75 


HYDRO 

or 

PNEUM 


H 


ADDITIONAL TEST DATA INFORMATION 


I 
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cn 

xm 

VHDOR SR 

Tis; 

SVAH 

R| 

D/s Prep. Tank Atay 

h Ca/ar 

UC 210J..51, -53, 
-55, -5T 

IDR <i6TS S 
DR li9>»>t, 
Vol. 1., 
AlllaoB DW. 

OW 

c-/ 

STi-OJO 
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Alraamrch 
A^-iliSIt t 
67-1M9 S 
AI« 10 » 1 ^ h 
AI- 102 e 7 -R. 

8 - 1 J -66 

310-003 
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Valva 
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4TR 56I|0014 
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3 W- 00 *; 
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ISC 270-00009 
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— 
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{ 

u 

1 

s 

1 

j 

1 

1 

t 

$ 

5 

i 

1 

1 

1 

1 

j 

I* 

1 

5 

8 

& 

•s 

•X 

0 

1 

•4 

d 

c 

S 

1 

I 

<k» 

1 

1 

ll-l-V 

7-26-<.7 

1 only 

T/ 


B 

B 

fl 


B 

fl 

fl 

B 

B 

B 

fl 

B 

B 

i 


■ 

■ 
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■ 

■ 

■ 

■ 

■ 

■ 

■ 

1 

a 

3-3-'"7 

3-«-6« 

M-3 I 
Sub 

1 

1 

1 

1 

1 


1 

! 

1 

1 

1 

1 

1 

1 

1 

lO-i' h'6 

lt-7-69 

!X*k It 
Suba 

1 

1 

1 

1 

1 


1 

I 

1 

1 

1 

1 

1 

1 

1 

.•-19-('7 

1-23-67 

1 4 lub. 

1 

1 

1 

1 

1 


1 

1 

1 

! 

1 

1 

1 

j 

1 

H-?9-70 


A A Sub, 

1 

1 

1 

1 

1 


1 

! 

1 

I 

1 

1 

1 

I 

1 

9-19-86 

10- S-6,7 

11- 3-69 

1 4 Buba 
9 4 Bub. 

1 

1 


1 

1 
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1 
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Os 


CfR 

ITEM 

VEHDOR RP; 

TEBT 

8TART 

TEST 

COMP 

CTE 

APnVD 

J70-CJ5 

D/8 Prep. Ttnk Aiiy 
li Ce^’er 
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0/8 Prop. Tank 
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B| 
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5.1 •i"’ 1 

A£& 


cm 

— 

mx 

VENDOR RRT 

TUT 

8TAier 

T«3T 

COMP 

i!70-00h 

Alc. Ttink 
UJC 280 - 7 - 57-3 Jc 
-58-3 

AOC l-ltOSl- 
01-5.3.?*7.C, 
-7.1, -7.S, 
Vol. I, -7-.'’ 
Vol. 11, -7.3 
-7.4 4 -3.3*1 
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270-c:U 

A/8 H« Tank* 
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.(-V 
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■ 
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HCS 


Cert Teic Kivlronninti 


CTR 

ITEM 

/ENDOR RPT 

1 

TE3T 1 

START 1 

TEST 1 
COMP 

<7TE 1 

AFHVD 1 

! 

ut 

1 

s 

a 

0 

! 

ae 

c 

3 

A 

g 

g 

5 

1 

f: 

C 1 
0 ; 

*• ' 
C 

J9 1 
> 

M 

1 

li 

S' 

H 

1 

5 

1 

K 

T* 

1 

U 

•C 

« 

1 

1 

Acceleration j 

IJ 

£• 

v4 

•H 

.0 

1 

L> 

<o 

u. 

tiu 

«.> 

w 1 

AJ 

1 

1 

** 

m 

U 

A 

1 

ADT3ED TESTS 

310-001 

Tank htf Lt . Wt , 
LSC 310-301 

1 
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-M- 


• -21- 

. Sub. 

1 

1 

1 



1 

1 

1 

1 
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Preifure Cycling & 
Creep 
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1 
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1 

1 
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SB 
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X 
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1 

1 
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3 --.' 
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1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 
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p-iiitance 
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(tIAA Dus '('ME 9 : 1 - 0004 ; 
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! (AQual) 
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11 - 23 -'.' 

1 

1-20-7 

•-a- r 
10 - 5-7 

1l i 3uh. 
[1 ic Sub 
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1 

Cot 

1 

i 

ect 
0 E' 
ten 

X 
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;el, 

Be 

1 an 
and 
iwee 

1 

i ot 
iHel 

^ 0. 

1 

X 

ler 

.UA 

jjj 

1 

1 ut 

■ate 

by 

lilt 

1 

<eiel 

inf 

\ w 

It a. 

r" 

iciii 
,th 1 

1 Ox: 

im Bi 
iitr: 
idlii 
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turi 
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Table ^.1-? (contln’.*ed) 

ECB 

gE8C. 0^ 


Ctrl Ttft bivlronatnta 


era 

— 

CTEK 

VEMDOR RPT 

TEST 

aTSRT 

■ 

CTI 

APRVD 

IM 

330-oao 

I'esc. Ox TanX 
(Gatcoua) 

tsr 330 - 320 - 3-1 

Wylt Laba. 
Raport 47319 

9-9-6C. 

11-21-66 

1| -28-67 
7-3-68 

? & Sub. 
6 tt Sub. 

y«-oii 8 

Beicent 0^ Preaiure 
Tranaducer 

IBC 3('iO-60X-?09-3 

WhJttakAr 
Raport 
#<ITR ftJ0037 

7-1-68 

9-9-(i8 

2-19-69 

1M“5 & 
Sub. 


a '* 8 

& M <H 

S { I 

s £ ? 


ridmH 


! I 

tf 1 I 
i e 1! 
3 g k 


AOLED TMTfi 


Cretp, Praiiure 
Cycling and 

Uakife. 
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5.2 DESCENT PROPULSION SUBSYSTEM 


5.2.1 Descent Propellant Tank 

Ihree descent propellant tanks were hydrostatically tested to burst; the 
test results are summarized In Table 

A tank was subjected to 44-day compatibility testing with N^Oj^ per MIL-P- 
26539ft- • When filled with this fluid, the conditions were 265 psig :Lntemal 
pressure at a temperature of 97°F to 110°P. Following tiiis exposure for 
44 days, the tank was given one proof cycle to 36 O psig with water followed 
by a burst test. The burst pressure was 44o psig and failure occurred in 
the lower dome. 

An additional tank was cycled to failure. It passed a proof test at 36O psig 
(water) and was then subjected to pressure cycles from 15 to 310 psig filled 
with water. The tank ruptured during the 3384th cycle. Failure originated 
in the upper dome and propagated throu^ the cylindrical section. The temp- 
erature during idle test was maintained between 95°F and 100°F. Minimum 
mission requirements for this tank are 400 cycles from 0 to 27O psig. 

Tank 55 (s/n G-O 29), was failed catastrophically diaring a helium leak test 
(Reference Figures 5.2-1 thrcu^ 5 -2-4) on 23 A\agust I966 . Pressure in the 
tank assembly was being Increased for the high pressure (270 psig) leak test. 

A pressure of I80 psig had just been recoinled iftien failxire occurred. The 
failure occurred while the tank assembly was inside a helium collection chamber. 
The tank shattered into many pieces and the helium collection chamber and 
adjacent equipment were severely damaged. The failure investigation disclosed 
that the failure originated in the 2014CT651 aluminum cover. The cause of 
failure was stress corrosion, possibly resulting from a 36O psig proof test 
with demineralized water which the cover received thirteen days earlier. The 
corrective action was to substitute titanium covers for the aluminimi. No tanks 
•ith aluminum covers have been, or are, used on fli^t vehicles. No failures 
ive occurred with titanium covers. 
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5.2.1 cont'd 


ISank 31» (S/N G-OO9), failed catastraphically during a hydrostatic proof test 
at 267 psigj approximately of the 360 psig proof pressure. Ihe fracture, 
which originated in the upper dome split the tank meridianally along a path 
approximately 4 inches from the tank axis. A thorough metallurgical investi- 
gation revealed -that the failure was due to a localized microstructure 
ahnomaH'ty consisting of embrittled massive alpha phase in the upper dome. Ihe 
true source of this massive alpha structure is unknown, but it was present in 
the forging dioring the forging operation. Alpha inclusions of ttiis sort cannot 
be detected by radiographic or ultrasonic inspection but imaBt be screen by the 
tank proof pressure test. 

5*8.2 Descent SHe Tank 

One SHe tank was pneumatically tested to actiial burst pressure; the test results 
are presented in Table 5*1-1« results of a SHe tank burst can be seen in 

Figures 5.2-5 through 5-2-9. 

In addition to the SHe tamk burst test, one inner shell was pneumatically 
tested to burst during DVT testing. The shell burst at a pressure of 3910 psig 
at 138°R. During the burst of the SHe t&,nk, the primary and secondary burst 
discs ruptured at 1978 p: ig- Helium temperature at time of rupture was ll*0°R. 

Data indicates tha c seven SHe tanks have imploded . Pour f&ilures were attri- 
buted to handling damage, ihree imits failed during external proof pressure 
screenirig tests. The screening test prevents marginal unite frcm being Installed 
on a flight vehicle. IHiese test reults are .■jummarized in Table 5.2-1. 

5.2.3 Ambient Hellm Start Tank 

One DPS ambient helium start tank was hydrcstatlcally tested to burst. Test 
results are summarized in Table 5. 1-1. 
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TABLE DPS Slle TANK IMPLOSION SUI-rARY 


^ Failure 
Report 

Date 

S/N 1 

t 

Pressure 

1 

Coirjnents 

■ — ■ ■ — 



D681U 1 

1 

1 - 8-69 

108 1 

— 

Durint; removal from LM-6 it was noted that the outer shell had 
Im.ploded; attributed to excessive handling. 

FAE 8080 

3-10-69 

11-1 

17.6 psia 

During external proof test, unit imploded at 17.6 pria, attributed 
to marginal design resulting from weight reduction (screening test). 

FAE 8079 

9-16-69 

120 


During external proof test, unit imploded at 17.95 pal®.; attributed 
to marginal design resulting from weight reduction (jcreenlng test). 

DMT 508510 

1-30-67 

109 


While assembling cover, unit Imploded; failure attributed to 
excessive handling. 

FAE 8071 

3 -i 8-67 

11:; 

18.8 psia 

During external proof test, the unit Imploded at I8.8 psia; the 
corrective action was to reduce the proof pressure from 19.5-20.0 
psia to 18.25 -r ,25 psia. 

Non-reportable 
problem occurred 
prior to A. T.P. 

8 - 11-66 

102 

* “ 

Unit imploded due to handling damage (pushed in); repaired with 
doubler. 

at vendor. 

9-67 

102 

" 

During loading movement of tank, a sling wrapped around a line and 
Imploded the tankj repaired with new outer shell 











DPS' "Propellant 'Bank Bailed Cyllridrica.1 Section 













Test J^ciiity After SHe fenk Pneufflatlc Ruptiire 




5.3 ASCENT H.JPULSION SUBSYSTEM 

5*3.1 Ascent Propellant Ihnks 

Six ascent propellant tanks were hydrostatically tested to hurst, Ttest 
results are suamarlzed in l?able 5*1-1* Figure 5 .3-1 shows the results of 
a hydroBta+"*c tank failure. 

1116 propells,nt tank was subjected to a hydrostatic test which consisted of 
the tank assembly being pressurized in 25-psi Incr^aents to 250 psig. After 
a 2-mlnute hold at 250 psig, 'die pressure was held momentarily at each pres- 
sure inereiaent to obtain the necessary strain gage data. After a 2-ainute 
hold at 3T5 peig, the pi%sst.re was increased at a constant rate of 20 psi 
per minute until burst occurred at 458 psig. 

The updated bank wtoich burst at 478’ aM’’4^ psig, differed from the original 
design in that it is an all-we Ided ‘ cx>nf iguration . This chai^ -ms ef f ec tl'se 
on IM- 6 and subsequent 

A review of the failure history indicates one failure which would have resulted 
in significant loss of oxidizer from the tank. On 2 November I965, during 
compatibility testing of the ascent oxidizer tank, a pressure loss of 2.5 psi/ 
min was observed. TJie failure occurred after approximately hj hours of testijig 
^^5 + 5 pel at a temperature of 103°F. Visual Inspection revealed that a„ f 
inch crack had develo-ped in the membrane area of the parent material of the 
tank. The vendor indicated that it was hi^ly probable that an inherent Imcoa- 
patibility existed between the titanium and N^Oj^ used during the testing. The 
proU^em has. been resolved by adding an inhibitor (NO) and controlling the w^ter 
content. An additional requirement is to avoid n-jmeroua pressure cycles of the 
r+ored NgOj^, The pi*ess-tre cycling tends to remove the inhibiting agent from the 
propellant. 

Subsequent to verification of the cause of failure and improvement in the NgOj^, 
the compatibility test was repeated utilizing two tanks for 75 days at 310 psi 
and a taaperature of 100°F. No leakage was noted during the test. After the 
exposure period, the btnks were pressurized with water at ambient temperature 1 
rupture occurred at 558/512 psig. 
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3.^.1 coat’d 


Ko cc»patibility test was conducted c- the ascent fuel tarfc. Sufficient data 
exist to dessnstrate tliat titani\an is co®i|a title witto Aerozoce-50. 

In addition to the a’oow testing, a desig:i verification test was completed on 
5 Sep-teaber 15^6. Tbe test consisted of proof pressure, -rfferation, creep, 
pressure cycling, acceleration and burst. Hie tank was hydrostatically pres- 
surized; raprure occurred at k63 psig at asbient teaperat'ure . 

>3*2 Ascent Hell ns Tarf ' 

:-wD A?? r.eliuB tanks were subjected to the following test envlroiaaeats during 
press-re tests : 

c Proof press -re to 1*650 + 10 psig at l60? for 5 aiautss 
u Four feuniref pressure cycles fixm 100 to 35t^ ' PSig at 1 c’rele/ais 
o Freer test - 31? hours at 3500 psig 
o -.:rs" Testing - 52^ psig at l60*^F sinfiauB 
™he burst test iatfs, ere s'-Marlaed is ubble 5*1-1* Figiire 5 ♦3-2 shows toe 
results of u hydrostatic ta;ik failure. 

The ores S', re was irxreased hydrostatically in 30-secoM is3creii»nts of 500 psi 
until a press'iire of 1,TCK3 psig reached and then increased in two increserits 
to 5 , 250 . The pressure ms toes gradually Increased imtll rixpture^ occurre& at 
5,7^5,500 psig. 
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?ig* 5 •3-1 APS Propellant Tan& After Hydrostatic Bupture 
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5.k REACTION CONTROL SUBSYSTEM 
5«^*1 Propellant Tanks 

Four RCS propellant tanks were hydrostatically tested to burst; 
test results are sum-sarized in Table 5.1-1. Figure 5.^-1 shows 
typical results of the burst test. Tanks were flight configured 
except that the teflon bladder was removed. At MSC, on 9 April 1969, 
an incorrect procedure caused a vacuum to be pulled on LM-2 oxidizer 
tank IF ' 310-405-11 and fuel tank ISC 310-405-12 which then collapsed 
under atmospheric pressure. This is not possible under flight condi- 
tions. 

5.4,2 Helium Tanks 

Two RCS helium tanks were hydrostatically tested to burst; test results 

are sun»a*’ized in Table 5.1-1. Figure 5.4-2 shows typical results of 
the burst test. Hydrostatic pressure was applied In 500 psi incre- 
ments to 47<X) psi, then in 250 psi increments to 5250 psi, the design 
burst pressure. Pressure was held at 5250 psi for 2 Ednates, then 

raised to the burst pressure of 5700/5800 pai. 
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Fig. 5.^-1 KGS Propellant lS,nk After Hydrostatic Ruptiire 




Pig. 5 . 1^-2 RCS He 'Dank After Ryaro static Ruptxire 
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5.5 ISVllOliiESmL CONTROL SUK1BTEM 


5 . 5.1 Deaeent Ta.ok 

Six descent osQfgen tanks were hjfarostatlcally tested to bxirstj test 
results are siMsarlzed In !Dable 5 * 1 - 1 * Kgune 5 * 5-1 shows the typical 
results of a hydrostatic failure . 

During a production acceptance test, a descent oxygen tank failed at 
3000 psig. The test procedure is to perfoao om pressurization to proof 
pressure and fire pressurization cycles to MDOP. The proof pressure m,& 
saintaimd for 2 min and each MDOP was aalntelned for 1 ain- This tank failed 
after ^ seconds of the 5th MDOP pressurization (ref. Ihilure Beport 
FAlOOl) . fbiilure ms attributed to a crack in the tank laaterlal itiich had 
not been detected. There ms an added stress corrosion factor involved 
because of iiataeralon of the tank in m.ter during the tests. Subsequent 
action included tank redesign, eltoimtion of the mter inraerslon and 
Increased %C cowrie. 

5*5*2 Ascent Oxygen Tank 

Pour ascent oxygen tanks were hydrostatically tested to burst j test 
results are smaiaarlzed in Table 5»1-1» 'Q'pical results of tank burst 
tests are shown in Pig. 5*5-2. 

5*5*3 Ascent Stage Hater Tank 

0 r» ascent water tank ms hydrostatically tested to burstj test results 
are sinaasarized in Table 5*1-1. The failed taidt is shown in Fig. 5*5-3* 

5*5*^ Descent Stage Water Tank 

One descent mter tank ms hydrostatically tested to burstj test results 
are suaoaarized in Table 5 .I-I. The failed tax* is shown In Figure 5*5-^* 
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Fig. 5 . 5-1 FCS d/s C-OX 'Dank After Hydrostatic Rupture 










5.6 BATIERIES 


All IM battery containers have vent valves to provide relief •while generating 
gas. Ihe opening and closing pressures of the vent valves on the primary 
batteries are checked just before bat-tery installation at KSC. The vent valves 
of -the pyro bat-terles are checked as piece parts early in the manufacturing 
flow. Ho'we'ver, -the IM pyro bat-teries do ha've test ports in the container 
•which could be used "tx) check the \^ent •val^ve operation at KSC in the same L.anner 
as -the primary bat^terles. 

The primary and ED bat-bery con-talners ha^ve never been tested ior o-ver-pressur- 
Izatlon. Analysis has shown -that once •the battery has been over-pressurized 
it -will relie-ve (not rupture) -through its -weakest point. Ebr "the primary 
batteries, -this is -the interface of "the Ijat-tery con-talner and co-ver at -the 
rubber gasket. 

The estimated pressure yitierx permanent yielding 'ivould occur in -the battery co-ver 
is 36.3 psig maximum. Leakage -will occur at a pressure well below 35 Pslg, since 
the variables such as 0-rlng and co-ver irregularities along wi-th case -wall and 
bolt tolerances were not taken in-to account in Ihe calculations and will act to 
lower the holding pressure of the con-tainer. This relief me-thod will not be 
explosive and will not present a source of shrapnel damage, al-though KOH will 
be spilled. 

There ha-ve been two isolated incidents ^ere Inadver-tent ED bat-tery case ruptures 
ha-ve occurred. These ruptures occun^d during laboratory o-ver- -testing during 
which the vent relief -val-ves were sealed. In bo-th cases there was In-temal 
pressure buildup and subsequent case rupture at -the rear corner seam of the 
battery. They were simple ruptures presenting no shrapnel effects. 


There are two Apollo I 3 anomalies associated with the descent batteries. 

a. Telemeti’’- data show that at 97 hours, 13 minutes and 56 seconds, 
battery 1 current curged to 30 amperes, battery 2 current exceeded 60 amperes, 
bat-tery 3 surged to 37 amperes and bat-tery 4 surged to 3 I amperes. For a 


5-39 



snort tine follovlng the gl.itch battery 2 caiTied approxinately 80 
percent of the load. Load sharing subse<iuently returned to the pre- 
giitch condition of 3 to U amperes per battery- A corresponding 
decrease in buss voltages vas experienced- At 97 liours, iL Einates 
and 42 seconds, the lunar asoduie pilot repoi'ted hearing a thuBg) and 
seeing snow flakes froo the descent stage. 

b. At approximately 100 hours, a battery sslfuncticn light 
illuBinated with a corresponding master alarm- The malfunction was 
isolated to the number 2 by onboard testing. The battery maifuneticn 
li^t extinguished when the battery was removed from the buss but 
illuminated inmediately when the battery was reconnected more than an 
hour later. A malfunction li^t indicates either battery overteapera- 
ture, oyercurrent, or reverse current. 

Test and analyses are being conducted to determine rhe causes and 
relationships between these anomalies. 
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5.7 TBAHSDOCHRS 


All LSC 360-605>303 Iwersion probe teapereture tranaducere are proof tested 
(collapse) to 2000 pels. Approzlaately 130 transducers have been tested during 
the IM prograa with no leedcage failures. The design collapse pressure 
specification of UOOO psla has not been tested for the -303 design. A slnllar 
unit (-301) of the sane design, but 1.3 in. shorter, was tested to 8000 pslg 
during qual and 6000 pslg during DVT with no lealtage. 

All absolute pressure transducers are proof tested at sniblent tesperature. 

Ihe proof- test and design burst pressure levels are shown In Table 5.7-1* 
Approzloately 1000 units have been proof tested on the IM prograa with 
no leakage failures. However, no burst pressure tests have been perlbmed fbr 
these transducers. A 350-psi 1025-serles transducer, that Is slnllar to the 
LSC 360-624 units, was tested to 13,000 psl without failure. In addition, 
transducers slnllar to the ISC 36O-6OI series have been burst tested by the 
vendor to levels in excess of 5 tines 'Qie rated range. 
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Table 5.7-1 


Absolute Pressure Transducer 
Proof and Design Burst Pressure Sumnary 


Transducer 

Proof * 
Pressure 

Design Burst Pressure * 1 

Sensing Elenent ; Reference Chamber 

i 

ISC 360-601-XXX-3 

2x if < 1000 psia 

5x 

1 

j 2x or 5000 psia. 

or 



! whichever is lower. 

ISC 360-601-XXX-2-1 

1.5x if > 1000 psia 



ISC 360-6A-XXX-2 

2x 

5x 

2x 

ISC 360-624-1-31 

2x 

5x 

650 psia 


* I«TE: 


Proof and design burst pressure as a function of t'ae rated pressure range 






6. DAMftCS; POTEBTIAL 


6.1 SUMMARY 

This section presents the results of the analysis performed to evaluate the 
potential damage to a IM from a ruptured pressure vessel. For this study, 
it has been assumed that a rupt\ired pressure vessel can fall in one or two 
vays: fragmentation or leakage; these failure modes are defined as follows: 

o Fragmentation - A pressure vessel rupture resulting in shrapnel, 
pressure forces and fluid loss 

o Leakage - A pressure vessel rupture resulting in pressure forces and 
fluid loss. 

For this study it has been assumed that any IM tank that fragments with a TlfT 
potential >0.1 lb will result in the loss of the vehicle and/or crew due to 
shrapnel and the close proximity of other pressure vessels, vital equipsent, 
electrical cables and/or plumbing. 

On the other hand, a leakage failure will result in no shrapnel, but will have 
the potential to damage the IM to a lesser extent from the hydrostatic/ 
pneijmatic forces and the fluid corrosive effects. The pneumatic forces from 
a ruptured hi^-pressure tank could damage such IM structure as descent stage 
beam panels and thermal shielding. Jagged edges of a ruptured tank, even 
through still attached to the tank, could sever electrical cabling, or intro- 
duce a structural flaw in an adjacent pressure vessel or fluid line. The 
effects of spillage of the tank contents are discussed in Section 4 for R 2 OU. 

Tables 6.1-1 and 6.1-2 suimarize the predicted failure modes for the IM 
pressure vessels as a function of the following mission phases; this assessment 
was based on the TITF equivalencies presented in Para. 6.2 and fracture mecheuiics 
considerations, Ihe tank critical pressures listed in Tables 6.1-1 and 6.1-2 are based 
on fracture mechanics calculations and are used to determine the pressure below 
which the tank will leak as opposed to fragment upon failure as a result of tank 
material flaws. It must be recognized, however, that fragmentation failure of one 
tai]k may cause another tank to be penetrated with a sufficiently large piece of 
metal to cause fragmentation of the second tank. This can occur even at pressures 
below ^Ich the tcmk would noimally leak as a result of material flaws. 
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6.1 oont'd 


Mission Hiaae Hb . 
1 
2 
3 
k 

5 

6 
7 


Mission Riase Event 
Launch 
Earth Orbit 
fianslunar Coast 
Lunar Oiblt to Touchdovn 
Lunar Surface Activity 
Lunar Ascent 
Lunar Orbit 


ihis section also presents a discussion in Bara. 6.4 of the effects of loss 
or degradation of llie Ilf theraal blankets. 
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TABLE 6.1-1 


PREDICTED FAILURE MODE AT MAX. OPERATIMJ PRESSURE PER MISSION PHASE 



KEY: PI - Fragmentation, TNT Equivalency >.^1 lb F2 - Fragmentation, TME Equivalency <-l lb 

L - Leakage Only 
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TABLE 6.1-2 

PREDICTED FAILURE MODE AT BURST PRESSURE PER MISSION PHASE 


si 

tank/ 

CRIT. PRESS 

1 

2 

MISSION PHASE 
3 ^ 


5 

6 


7 

1 ■■■ 

HELIUM 
12 U 2 PSI. 

FI 

FI 

FI 

FI 

FI 

FI 

FI 

1 


F2 

F2 

F2 

F2 

F2 

F2 

F2 

1 


i F2 

1 

F2 

F2 

F2 

F2 

F2 

F2 

T 

OXIDIZER "A' 
2k7.5 PSI. 

F2 

F2 

F2 

F2 

F2 

F2 

F2 1 

1 

i 

OXIDIZER'S"; 

247.5 PSI. ‘ F2 

F2 

F2 

F2 

F2 

F2 

! 

re 1 



FI 

Not consj 
! ever, coi 

FI 

dered by i 
sidered ai 

FI 

■racture m 
"FI" bv 

FI 

:chanics a 
rirtue of 

FI 

lalysis in 
rar equiva 

N/A i N/A 1 

this report, how- 1 

lency. ! 

D 

AMB.HEUUM 
805 PSI. 

' FI 

FI 

FI 

FI 

1 

L 

n/a 


N/A 1 

P 

S 

FUEL 

118.7 PSI. 

F2 

F2 

F2 

F2 

FI 



1 

N/A i 


OXIDIZER 
118.7 PSI. 

F2 

F2 

F2 

1 

1 ^ 



n/a 


N/A , 

i A 

HELIW! 
938 PSI. 

FI 

FI 

FI 

FI 

FI 

FI 


1 

FI 

P 

S 

lUEL 

m PSL 

F2 

F2 

F2 

1 

1 F2 

1 n 

FI 


FI 

1 



F2 

F2 

F2 

! F2 


FI 

FI 


FI ! 

{ 

* E 

A/S 0 (1) 

1542 KI. 

F2 

F2 

F2 

1 

i F2 


F2 

F2 


F2 

' C 

A/S 0 (2) 

1542 fel. 

F2 

F2 

F2 

i F2 
1 


F2 

F2 


. F2 

: S 
} 

D/S 0 
1621 KI. 

, FI 

FI 

FI 

I 

! FI 
! 


FI 

n/a 


: N/A 


a/s Hgb 
390 PSI. 

L 

L 

L 

! ^ 


: L 

1 

L 


L 


d/s 

243, rei. 

L 

L 

1 

i 

1 ^ 


' L 

\ 

i n/a 


1 

n/a 


KEY: FI - Fragmentation, TNT Equivalency > .1 £b F& fragmentation, TNT Equivalency 


L - Leakage Only. 


.1 lb 


6-k 











































































6.2 TNT HIUIVAIJWCY 


iwr equivalency fbr all IM pressure vessels have been derived for -Uie major 
mission phases. Ihe TNT valves, calculated for both tank maximum operating 
pressures and burst pressures (limit pressure), are presented in Thbles 6.2-1 
and 6.2-2, respectively. 


A constant temperature vas assumed in calculating the INT values from the 

following equation: 

Bovinds of TNT = PV ^ 

(S' - 1) 1.4 X 10 ° 

Nhere P = pressure (psf) 

V = gas volume (cu. ft) 

= ratio of specific heats (gas only) 


l.U X 10“^ 


Nbrh 
lb TUT 


= TNT equivalency conversion factor. 


The following data are presented to provide a comparative measiue for the IM 
pressure vessel TNT equivalencies: 


Explosive Device 

Rifle Primer (or Firecracker) 

.22 Long Rifle Cartridge 

.45 Pistol Cartridge 

NO. 8 Electric Blasting Cap 

.30 M2 Ball Rifle Cartridge 

. 50 M2 Ball MG Cartridge 

20 MM HE Projectile 

MKII Fragmentation Hand Grenade 

One Stick (one lb) 100^6 Gel. Dynamite 

Antitank Mine 


Lb TNT Equlv . 

0.000092 

0.000232 

0.000563 

0.00127 

0.00480 

0.0226 

0.025 

0.125 

--1 

5 
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TABtE 6 . 2.1 TNT JaurVAI^NClES 


JCSSION, 


TANK 


FHASI 


RCS 

- Helium 

- Fuel A 

- Fuel B 

- Qxid A 

- Qxid B 

DBS 

- SHe 

. Amb. He 

- Fuel 

. Oxidizer 

APS 

- Helium 

- Fuel 

• Oxidizer 


i ECS 


! - ^/s 

0^ (1) 

I - A/s 

Oj, (2) 

- D/S 

0.. 

CO 

— 

< 

1 

H^O 

- D/s 

«2° 


LAUNCH 

0.267/3500 - 
3 . 5 xl 0 *V 250 
3 . 5 x 10'**/250 
2xlo"^/250 . 
2xl0**‘/250 - 


0 . 3 '* 0 /U 05 

0.269/1750 

0.051/270 

0.038/270 


1.78/ 0 
0.017/250 
0.009/250 


0.129/1000 
0.129/1000 
2.U/3OOO ■ 
0.0028/1*8.2 
0.022/1*8.2 


LOI 


TNT E 5 UIVALENCY (LB)/MAX. OPERATING PRESSURE (PSIA)AS A FUNCTION OP MISSION PHASE 

im/csm dock 


0.77/915 


0.129/1000 


2 . 35 / 29 ‘tO 


I« ACTIVATION 


0.87/1035 


0.118/915 


2.35/29W 


LUNAR TOUCHDOWN 


0.21*5/3210 
0.0088/250 
0.0103/250 
0.0116/2 50 
0.012l*/250 


0.1*2/500 

0.135/876 

2.15/270 

2.43/270 


LUNAR LIFTOFT 


0.245/3210 

0.0096/250 

0.0106/250 

0.0125/250 

0.0133/250 


ASCENT BURN OUT 


0.245/3210 

0.0096/250 

0.0106/250 

I 0.0125/250 

i 0.0133/250 


N/A 

N/A 

N/A 

N/A 


1 — • 


0.118/915 


; 0.107/829 


2.13/2660 


N/A 


0.021/34.5 


K/A 


*Based on a vorkb-csse conblnatij' 
and gas volumeu these values e:f; 
the H„ 0 , 0 „ and He tanks, and 
pellant tanks .1 


0 . 646/1270 

1 . 36/250 

1.32/250 


0.107/829 


0 . 0027 / 41.1 


0.231/3120 

0.0328/250 

0.0320/250 

0.0376/250 

0.0428/250 


Ipn of aaxinun o: 
let at full'tank 
ipty-tank condlt; 


0 . 646/1270 

1.36/250 

1.32/250 


0.065/504 


0.0025/27.0 


ting pressure 
leondltlons for 
ns for the pro- 


Ib; 


MAX TNT 
BlUIVALEHCl* 


0.267/3500 

0.071/250 

0.071/250 

0.089/250 

0.089/250 


1.438/1710 

0.269/1750 

2.61/270 

2.61/270 


1 . 78/3500 

1.387/250 

1.387/250 


0.129/1000 

0.129/1000 

2.4/3000 

0 . 0028 / 48.2 

0 . 022 / 48.2 



TABLE 6.2-2 TNT EQUIVALENCIES 


(Ts 

t 




- Oxidixer 


A/s Og (1) 
A/S Oj (2) 


- A/S H^O 

- D/S HgO 



















6.3 FAIUJHE MDDE AND EFFECT ANALYSIS 

An FMEA was performed to identify those potential failures which might, as a 
secondary mode, result in a catastrophic vehicle failure, providing the first 
assumed tank failure is survived. This assumption, that the crew is not in- 
jured, is based on the cryogenic SM oxygen tank failure experienced on 
Apollo 13. The results of this FMEA are summarized in Table 6.3-1; this table 
identifies only secondary items immediately surrounding the failed temk that 
would further affect crew safety. The criticality for the first failure 
(Column 1) is based on the loss of fluid only. The phases of the mission, where 
the combination of a tank failure and the associated loss of an eidjacent item is 
of concern, are indicated. The ndssion phases are defined in Para. 6.1. 

The following paragraphs present discussions of the IM pressure vessels based 
on the results- of this FMEA. 

6.3.1 DPS Propellant Tanks 

Loss of all the consumables in any or all of these tanks will Impair the 
safety of the crew in the non-abort stEige zone only. An explosive rupture of emy 
of the propelleint tanks may directly result in loss of the crew due to shrapnel, 
or cause a chain reaction e:q)losion of the other tanks on the IM which would re- 
sult in the loss of the crew. The following discussion indicates the concern 
for loss of items siirrounding these tsmks. The +Y or +Z propellant tank could 
affect the umbilical and/or E.D. wiring to the extent that staging wovild be 
impossible. Loss of either APS propellant tank would result in loss of the 
crew, assuming the failure occurred during powered descent. During any 
mission phase, there is a danger of hypergolic mixing if a propellant tank 
ruptures the complementary propellant manifold. 

6.3.2 DPS Ambient He Tank, Descent GOX Tank and Supercritical Helium Tank 
Loss of any or all of the consumables in these tanks would not impair the 
safety of the crew. Explosive rupture of smy Quad III tank may result in 
loss of crew by shrapnel from any or all of the subject tanks or loss of any 
of the following in the non-abort stage zone; DPS oxidizer tank No. 1 , DPS 
fuel tank No. 1 , DECA, and DPS engine. In addition, the de'jcent fuel and ox- 
idizer lines on the lower deck of Quad III or the RCS propellant lines above Quad III, 
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could be ruptxired, resulting in hypergolic mixing, and/or the staging cap- 
ability could be lost if the ED lines from both ED systems to an interstage 
fitting are severed. 

6.3.3 APS Propellant Tanks 

Loss of the consumable in either of these tanks is a crew safety consider- 
ation from lunar landing commitment to safe pericynthion orbit. Explosive 
rupture of either APS propellant tank can cause loss of crew due to shrapnel 
or cabin puncture. An explosive rupture of an APS propellemt tank prior to 
lunar leuiding conmitment, may, in turn, cause explosive rupture of the DPS 
propellant tank directly beneath it, or KCS tanks, and/or RCS fluid lines. 
This could result in loss of the crew due to shrapnel or hypergolic mixing. 
After safe pericynthion orbit there is still a concern for an APS tank ex- 
plosive rupture due to shrapnel and possible propagation of RCS tank (s) ex- 
plosive rupture. 

6.3.4 RCS System and A/s Water Tanks 

Loss of either one of the RCS or A/S HgO tank consumables will not cause 
loss of crew. An explosive rupture of any RCS tank or A/S water tank may 
cause loss of crew due to secondary explosions of other nearby tanks (RCS 
and APS) , shrapnel, or by cabin puncture when the crew is not in the closed 
suit loop mode. In euidition, explosive rupture of any RCS tank can cause 
the loss of the redundant RCS system, thereby losing 

all vehicle attitude control, or cause leaks in lines and/or tanks containing 
the complementary propellant and r-esult in hypergolic mixing. 

6.3.5 Descent Water Tank 

Loss of the descent water tank constimable would not impair the safety of 
the crew. Loss of crew may result if shrapnel from this tank punctures 
the cabin and the crew is not in the closed suit loop mode^ or damages the 
adjacent D/S propellsuit tanks or fluid lines In the non-abort stage zone. 

6.3.6 a/s GOX and He Tanks 

Loss of all a/s GOX tanks consumables will not cause loss of crew since in 
the worst case, d/s GOX is used for cabin pressurization and the oPS's en-e 
available as an additional supply. Loss of consianables in any one of the 
He teinks will not cause loss of crew} however, after pressurization, a leak 
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in any He tank will cause j.oss of crew due to loss of all ascent He and 
loss of APS capability. An explosive rupture of any A/S QOX or He tank 
nay result in loss of crev fron shrapnel effects fron any or all of these 
tanks, cabin rupture when the crew is not in the closed suit loop mode, or 
damage to the wiring assemblies or fluid lines in the Aft Equipment Bay 
(i.e., loss of all electrical power, ATCA loss resulting in the necessity 
of a handover direct ascent from the lunar surface, loss of all active 
coolant, or la^’s of RCS control lines). In addition, the loss of nearby 
RCS fuel and .ddizer lines could result in hypergolic mixing or lead to loss 
of all RCS capability by depleting RCS consumables. Finally, the staging 
capability of IM could be lost if the ED electrical lines from both ED 
systems to an interstage fitting are severed. 

6.3.7 d/s GOX and Water Tarks (lM -10 and subsequent) 

Loss of any or all of the consunables in these tanks would not impair 
safety of the crew. E3Q)losiYe ruptiue of either Qiiad IV tank may result 
in loss ot' crew by shrapnel or cabin puncture. E:q)losive rupture of these 
tanks nay propagate explosion of the DPS fuel and oxidizer tanks, resulting 
in hypergolic mixing, or rupturing of a descent propellant tank i>. the non> 
abort stage zone, resulting in descent engine shutdown. Finally, the stag- 
ing capability could he lost if the ED electrical lines from both ED s^'shens 
to an interstage fitting are severed. 
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Effects on the LM Vehicle 


Remarks 

May rePuJ.t in chain reaction 
of high pressure tank explo- 
sions and/or cabin rupture 
due to shrapnel. Close prox- 
imity to desc. GCK tank which 
has high TNT potential. 


See LED-550-175B for descript- 
ion of inadvertent cable cut- 
ting. Requires transfer of 
three relays in box oi one 
dquib actuation in cable assem- 
bly. 

Close proximity of fuel line. 
Rupture may cause fire or 
explosion. 

Gross leak of cabin would 
cause loss of the crew. If 
they are not in a close suit 
loc^ mode. 


X 


Close proximity of cables 
from redundant ED systems. 
Inability to stage vehicle. 
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Table 6.3-1 - Summary Table For Fragmentation Type Failure Effects on the LI/. Vehicle (cont'd) 


Tank and Functional 

Surrounding Safety 

Major Addition 

Crit , 

Mi. 

3.0 ion P>ic 


Remarks 

Concern 

Hazard Equipment 

al Concern 

1 

2^ 

-2_ 

li 


6 

7 

d/s Oxid. Tank (-Z) 

SHe Tank or GHe 

Explosive 

X 

X 

X 

X 

X 



May cause chain reaction of 

Tank or GOX Tank 

Rupture 








high pressure tank bursts and/ 


or Ascent Helium 
Tank (2). 









or cabin rupture. 

Explosive rupture of 

Descent Water 

Explosive 

X 

X 

X 

X 

X 



Close proximity to descent 

this tank causes 

Tank (Quad # 2 ) . 

Rupture 








fuel tank which has high TNT 

shutdown of descent 
engine. This fail- 










equivalent. 

ure causes loss of 

RCS Engine lines 

Hypergolic 

X 

X 

X 

X 

X 



Close proximity of oxid. and 

crew in non-abort 

(Sys.A&B) (Oxid. 

mixing 








fuel lines. Rupture of both 

stage zone only. 

and Fuel) . 









may cause explosion or fire. 



Loss of attl- 




X 

X 



Close proximity of redundant 



tude control. 








systems. Damage upstream of 
isolation valves. Loss of all 
RCS fuel or oxid. Loss of 
attitude control capability. 


Aft Equip. Bay- 

Loss of 




X 

X 



Close proximity of all hard- 


Equip/Wiring/ 

function (s) 








ware. Loss of ATCA would cause 


G].ycol Plumbing 









loss of DAP i AAP tenable. Only 
direct mode availaole for 











lunar ascent. Loss of veh. power 
and/or cooling. 


Fuel Manifold 

Hypergolic 

X 

X 

X 

X 

X 



Close proximity to oxid. tank. 


(Bottom -Z Comp) 

mixing 








Rupture may cause an explosion 
or fire . 


Helium press. 

Gross external 




X 

X 



Loss of all APS helium. Inabil- 


Module (2) APS 

leak. 








ity to sustain ascent engine 











firing. 


Table 6.3;-l - Summary Table For Fragmentation Type Failure Effects on the LM Vehicle (Cont'd) 


Tank and Functional 
Concern 

Surrovinding Safety 
Viai’.ard Equipment 

Major Addition 
al Concern 

Crit. Mission 

=>hase 

Remarks 

1_ 

2 

3 ^. 

4 

X 

6 

7 

d/s Oxid. Tank (-Z) 
(Cont’d) 

Ascent Glycol 
lines (Pri & Sec.) 

ED Nut & Bolt 
Comb . 

Gross external 
leak. 

Staging 



X 

X 



Close proximity of Pri ft Sec. 
Ifaop. Loss of cooling of crew/ 
critical equipment. 

Close proximity of cables from 
redundant ED systems . Inabil- 
ity to stage vehicle. 


Table 6.3-1 - Summary Table For Fragmentation Type Failure Effects on the U*: Vehicle (Cont'd) 


Tank and Functional 

Sojr rounding Safety 

Major Addition- 

Crlt. 

Mission 

Pha 

se 

Remarks 

Concern 

Hazard Equipment 

al Concern 

1 

2 

X] 

4 

5. 

6 


Descent Fuel Tank 
(+Y) 

Descent Water 
Tank (LM-10 only) 
(Quad #U) 

Explosive 

Rupture 

X 

X 

X 

X 

X 



Close proximity to Descent 
GOX tank which has high TNT 
equivalent . 


GOX Tank (LM-10 
only) (Quad #4) 

Explosive 

Rupture 

X 

X 

X 

X 

X 



May cause chain reaction of 
high pressure tank bursts jind/ 
or cabin puncture. 


ED Relay Box and 
Wiring (Quad #4) 
or Umbilical 
Cutter (Quad #4) 

Inadvertent 
Cable cutting 




X 

X 



See LED-550-175B for effect of 
inadvertent cable cutting. Re- 
quires transfer of three relays 
in the box orone squib actua- 
tion in the cutter assembly. 


0x1 d. Manifold 
(Bottom +y Comp) 

Hypergolic 

mixing 

X 

X 

X 

X 

X 



Close proximity of oxid.line. 
Rupture may cause fire or 
explosion. 


GHe Tank or GOX 
Tank' or SHe Tank 
(Quad # 3 ) 

Explosive 

Rupture 

X 

X 

X 

X 

X 



May cause chain reactic of 
high pressure tank bursts 
and/or cabin puncture. 


ED Nut & Bolt 
Comb. (Quad #3) 
or Umbilical Cut- 
ter (Quad #4) 

Staging 




X 

X 



Close proximity of cables from 
redundant ED systems. Inabil- 
ity to stage vehicle. 
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Table 6.3-1 - Sunimea'y Table For Fragmentation Type Failvire Effects on the LM Vehicle (Cont'd) 


Tank and Functional 
Concern 

Surroxmding Safety 
Hazard Equipment 

Major Addition- 
al Concern 

Grit. MisEi< 

3n 

Phase 

Remarks 

1 

2 

3 

li 

A.\ 

6 

7 

Descent Fuel Tank 
(-Y) 

Water Tank 
(Quad 

APS Fuel Tank 
(-Y !Axis) 

ED Nut and Bolt 
Comb. (Quad #2). 

Explosive 

Rupture 

Primary explo- 
sive rupture. 

Staging 

X 

X 



X 

X 

X 

X 

X 

X 

X 

X 

X 

X 



Close proximity to descent 
oxld. tank which has high TNT 
equivalent . 

May cause chain reaction of 
high pressure tank bursts and/ 
or cabin puncture. 

Close proximity of cables from 
redundant ED systems. Inabil- 
ity to stage vehicle. 


9 T- 


Table 6.3-I - Summary Table For Fragmentation Type Failure Effects on tae U-I Vehicle (Cont'd) 


Tank and Functional 

S\n*rounding Safety 

Major Addition- 

Grit . 

Mi: 

:slon Phase 

Remarks 

Concern 

Hazard Equipment 

al Concern 

1 

2 

p_j 

4 

J.j 

6 

J- 

The following equip- 

Any one or all 

1) Explosive 

X 

X 

X 

X 

X 

X 

X 

May result in chain reaction 

ment are located in 

tanks in this 

Rtrpture 








of high pressure tank explo- 

close proximity and 

area. 









sions and/or cabin rupture due 

are therefore, 
treated as a group: 










to shrapnel. 

RCS Fuel Tank B 
RCS Oxid Tank B 


2) Hyper gollc 

X 

X 

X 

X 

X 

X 

X 

Close proximity to fuel tank. 


mixing 








Rupture may cause explosion 
or fire. 

RCS Heli\un Tank- B 

Ascent HgO Tank #2 

APS Oxidizer 

1) Explosive 

X 

X 

X 

X 

X 

X 

X 

Same as 1 above. 

Functionally, the 
loss of any one or • 
all of the fluids in 


Rupture 
2) Hypergolic 

X 

X 

X 

X 

X 

X 

X 

Same as 2 above. 

these tanks will not 
resiilt in loss of 


mixing 









the crew at anytime 

RCS Fuel and Oxid. 

1) Loss of 




X 

X 

X 

X 

Close proximity of redundant 

in the mission. 

lines for Quad 3 

RCS cap- 








system. Damage upstream of 


or 4 . 

ability 








isolation valves can result in 
loss of all RCS fuel or oxid. 
Loss of attitude control. 



2) Hypergolic 

X 

X 

X 

X 

X 

X 

X 

Same as RCS Oxid. Tank B, Part 



mixing 








2, 


E.D. Nut /Bolt 

Inability to 




X 

X 



Severing of the firing lines 


Combination # 3 . 

stage . 








from both E.D. Systems will 
preclude staging. 


Wiring: EPS, 

Loss of all 




X 

X 

X 

X 

Loss of vehicle control, ECS, 


COMM, INSTR. 

vehicle power. 








Guidance, COMM., etc. 


Cabin 

Rapid decom- 



X 

X 

X 

X 

X 

Loss of crewlf they are not in 



presslon of 








the closed suit loop mode. 



cabin . 








. 



Table 6 . 3 -I - Simmary Table For Fragmentation Type Failiire Effects on the LM Vehicle (,'ont'd) 


Tank and Functional 

Surrounding Safety 

Major Addition' 

Crit. 

Mission 

Phase 


Concern 

Hazard Equipment 

al Concern 

1 

2 

3 

4 


6 

7 


The following equip, 
are located in close 
proximity and are 
therefore treated as 

Any one or all 
tanks In this 
area. 

1 ) Explosive 
Rupture 


X 

X 

X 

Y 

X 

X 

May result in chain reaction 
of high pressiire tank explo- 
sions and/or cabin rupture due 
to shrapnel. 

a group. 

RCS Fuel Tank Sys. A 
RCS Oxid Tank Sys. A 
RCS He Tank Sys. A 


2 ) Hypergolic 
mixing 

X 

X 

X 

X 

X 

X 

X 

Close proximity to fuel tank. 
Rupture may result in explosion 
or fire. 

ASC HgO Tank #1 

RCS Fuel and Oxid. 
lines for Quad 1 
or Quad 2 

1 ) Loss of RCS 
capability 




X 

X 

X 

X 

Close proximity of redundant 
systems. Damage upstream of 
isolation valves can result in 
loss of all fuel or oxid. Loss 
of attitude control. 



2 ) Hypergolic 
mixing 

X 

X 

X 

X 

X 

X 

X 

Close proximity of fuel and 
Oxid. line. Rupture of both 
may result in an explosion or 
fire. 


RCS Control Wir- 
ing (Oxid Tank 
only) 

Loss of attit- 
ude control 




X 

X 

X 

X 

Close proximity of RCS wiring. 
Loss of RCS engines. Loss of 
attitude control. 


ED Nut -Bolt 
Combination #2 

Inability to 
stage 




X 

X 



Will not be able to stage the 
vehicle if the nut/bolt com- 
bination firing lines are 
severed. 


Wiring; EPS, INST. 
COMM. 

Loss of vehiclt 
power . 




X 

X 

X 

X 

Loss of environmental control 
and vehicle control. 


Cabin 

Rapid decom- 
pression of 
cabin . 



X 



X 

X 

X 

X 

Loss of crew if they axe not 
in the closed suit loop mode. 


pT- 


Table 6 . 3 -I - Suroraary Table For Fragmentation Type Failure Effects on the LI'! Vehicle (Cont'd) 


Tank and Functional 

Surrounding Safety 

Major Addition- 

Grit. 

Mission 

Ph'ise 

Remarks 

Concern 

Hazard Equipment 

al Concern 

1 

2 

3 

k 

5 

6 ^ 

7 

The following equip. 

Any one or all 

1 ) Explosive 

X 

X 

X 

X 

X 

X 

X 

Rupture of tank may directly 

are located in close 

tanks in this bay. 

Rupture 








injure crew by shrapnel and/or 

proximity in the 







■ 



propagate explosion of other 

same area and are 
therefore treated as 










high pressure vessels. 

a group. 

d/s Oxidizer Tank 

Explosive 

X 

X 

X 

X 

X 



Same as above 

Ascent He 1 or 2 

(-Z) 

Rupture 









Ascent GOX 1 or 2 ’ 

Cabin 

Rapid decom- 



X 

X 

X 

X 

X 

Loss of crew if they are not 

Functionally, a sin- 


pression of 








in the closed suit loop mode. 

gle Asc. Helium Tank 
rupture, after pres- 


cabin. 









stiri*ation, would 

Fuel and Oxid. 

Loss of RCS 




X 

X 

X 

X 

Close proximity of redundant 

resiolt in loss of 

lines feeding RCS 

capability. 








systems. Damage upstream of 

all helium thus,pre- 

engine Quad 2 or 









isolation valves would result 

eluding a lunar lift- 

3 . 









in propellant depletion from 

off. Prior to pres- 










both RCS systems . 

surization^loss of 
one tank will not 


Hypergolic 

X 

X 

X 

X 

X 

X 

X 

Close proximity of oxid. and 

result in loss of 


mixing 








fuel lines . Rupture of both 

crew since it can be 










may result in explosion or 

isolated. 










fire . 

Functionally, loss 
of a single Asc. GOX 
Tank will nfat cause 

Ascent He press . 

Gross external 





X 

X 


Loss of APS He flow. Inabil^.ty 

Modules ( 2 ) 

leak. 








to maintain AE firing. 

loss of crew at any 
time in the mission. 

AFT Equip. Bay- 
Equip/Wir ing/ 

Electrical 
Shorting and/ 




X 

X 

X 

X 

Close proximity of all hard- 
ware. Loss of any or all of 


Glycol Plumbing 

or opens . 








the following: Attitude Control, 
VEH. power. Propulsion. Loss 
of ATCA would cause loss of 











DAP and AAP enable. Only direct 
mode available for lunar as- 











cent. 
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Table 6.3-1 - Sunnnary Table For Fragmentation Type Failure Effects on the M Vehicle (Cont'4 


Tank and Functional 
Concern 

Surrounding Safety 
Hazard Equipment 

Major Addition- 
al Concern 

Grit. Mission ] 

=*hase 

Remarks 

1 

2 

3 

k 


6 

7 

ASC. He 1 or 2 
ASC. GCK 1 or 2 
(Cont ' d) 

ED Nut-Bolt Com- 
bination 1 or 2. 

Nut and Bolt 
firing lines 
severed. 




X 

X 



Close proximity of cables 
from redundant ED- systems . In- 
ability to stage vehicle. 
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Table 6.3-I - Summary Table For Freign.entation Type Failure Effects on the LK Vehicle (Oont'd) 


Tank and Functional 

Surrounding Safety 

Major Addition- 

Crit. 

Mission Phase 

Remarks 

Concern 

Hazard Equipment 

al Concern 



3 

4 

5 

6 

i. 

Ascent Propulsion 

RCS Oxidizer Tank 

Explosive 

X 

X 

X 

X 

X 

X 

X 

May cause chain reaction of 

Oxidizer Tank (+Y) 

(Sys. B) or RCS 

Rupture 








high pressure tank bursts 

Helium Tank (Sys . 
B). 









and/or cabin rupture. 



RCS Fuel Tank 

Explosive 

X 

X 

X 

X 

X 

X 

X 

May cause chain reaction of 


(Sys. B) or Des- 

Rupture 








high pressure tank bursts 


cent Propulsion 









and/or cabin rupture. 


Fuel Tank (+Y). 

Hypergolic 

X 

X 

X 

X 

X 

X 

X 

Close proximity to oxid. tank. 



mixing 








Rupture may result in explo- 
sion or fire. 

Functionally, the 

RCS Engines 

Loss of both 




X 

X 

X 

X 

Close proximity of redundant 

loss of the ascent 

(System A&B) 

RCS systems. 








systems. Damage upstream of 

oxidizer tank would 

Quad #3 or 









isolation valves. Loss of all 

preclude a lunar 

Quad 









RCS fuel & oxid. Loss of atti- 

ascent. This failur< 
would result in loss 

' 









tude control capability. 

of the crew if it 


Hypergolic 

X 

X 

X 

X 

X 

X 

X 

Close proximity of oxid. & 

occurs from the non- 


mixing 








fuel lines . Rupture of both 

abort zone in power- 










may result in explosion or 

ed descent through 
the lunar ascent 










fire . 

minimum rescue orbit 

Iftnbilical Cucter 

Inadvertent 




X 

X 



See LED-550-175B for effect 


and Wiring 
(Quad #4) . 

cable cutting. 








of inadvertent cable cutting. 


RCS Engine Con- 

Loss of atti- 




X 

X 

X 

X 

Close proximity of RCS cables. 


trol Wiring 

tude Control 








Loss of RCS engines. Loss of 


(Quads #3 & 4) . 









attitude, control . 






Table 6.3-I - Summary Table For Fragmentation T;ype Falliire Effects on the M Vehicle ( Cont'd ) 


Tank and Functional 
Concern 

Surrounding Safety 
Hazard Equipment 

Major Addition- 
al Concern 

Crit. T-iission Phase 

Remarks 

1 

mm 

El 

5 

m 

7 

Ascent Propulsion 
Oxidizer Tank (+Y) 
(Cont'd) 

Cabin 

ED Nut and Bolt 
Comb, or Umbilical 
Cutter . 

Rapid Decom- 
pression 

Staging 




X 

X 

X 

X 

X 

X 

X 

Loss of crew if they are not 
in closed suit loop mode. 

Close proximity of cables 
from redundant ED systems. In- 
ability to stage vehicle. 







Table 6.3-I - Summery Table For Fi'agmentation Type Fr 


Tank and Furcticnal Surroundinp, Safety I j or ^ -f, 

Conjern Ha'-iard Equipment; |a3. Concern 


/ucent Fuel Tank RCf. Fuel, He •'nd/ l) Explosive X XI 

or Oxid. Tank Sya,' Rupi.ui’ft 
A or Des. Fuel 

Tank 1 


Functionally, ttie 
' ass of the ascent 
: ue.l cank would pre- 
clude a lunar ascent 
This failure would 
result in loss of 
the crew ‘ f it occur! 
from the non- abort 
zone in powered des- 
cent ttirou;;n the 
lunar ascent minimum 
rescue orbit . 


ECS Oxid. Tank 


Hyperrelic 

mixinr 


Fuel and Oxid.j l) Loss of all 


lines for Quad /'l 
or F'uad l; 2 , 


I xi : 


HCS capabil- 
ity. 


?) IIyper"olic X 
mixinr. 


ECS enrine con- 
trol wirin/5 for 
Quads //l and. //£ . 


Loss of otti 
tude Control 


Cabin 


Eapid decom- 
pression of 
cabin. 


Effed 


on the LM Vehicle (Cont'd) 






7 

X 


X 

X 


V 


X 


Remarks 

May re'ult in chain reaction 
of hi.qii pressure tank acplosiot 
and/or cabin rupture due to 
shrapnel . 

Close- proximity to fuel 
Rupture tr.ay result in fire cj 
explosion . 

Clo.se proximity of redundant 
systems. Darneq^e upstream of 
the isolation valves can re- 
sult in propellant depletion 
from both ECS systems. Loss 
of Att. Control. 

c;iosc proximity of oxid. t 
fuel lines. Rupture of ibh 
may result in explosior. or 
fire. 

Close proximi / of L'CG cables. 
Loss or RCG engines. Loss of 
attitude control, 

Ljs.s cf ci’ow if they are not 
in the closed suit loop mode. 






Table 6 . 3 -I - Summary Table For Fragmentation Type Failure Effects on the LI-1 Vehicle ( Cont'ci 


T’ank und Functional 

Surrounding Safety 

Major Addition' 

Crj 





Phase 

Remarks 

Concern 

Hazard Equipment 

al Concern 

1 


3 

k 

5 

6 

I™ 

All tanks in Quad 3 

Any one or all 

Fragmentation 

X 

X 

X 

X 

X 



May cause chain reaction of 

(i.e. 'JHe, GHe, GOX) 

tanks in Quad #3, 









high press ure tank bursts and/ 

Loss of the fluids 

fuel tank (+Y), 









or cabin rupture. 

in any or all of 
these tanks is not 

0x1 d tank (-Z) 










ctew safety (Loss 

Descent Engine 

Hypergolic 

X 

X 

X 

X 

X 



Close proximity of oxid. and 

of mission only). 

Fuel & Oxid. line 
(lower deck quad 3 

mixing 
) . 








fuel lines. Rupture of both 
may result in explosion or 
fire. 


Fuel Tank (+Y) or 

Loss of des- 




X 




Explosive ruptureof this tank 


Oxid Tank (-Z) or 

cant engine 








(line) causes shutdown of 


Fuel riianifold or 

capability . 








descent engine. This failure 


(lower deck 









causes loss of crev; in non- 


Quad ^3) Oxid. 
Manifold (lower 









abort stage zone. 


deck Quad //3) 











ED nut & bolt 

Nut a bolt 




X 

X 



Close proximity of cables 


comb. (Quad #3) 

firing lines 








from redundant ED.. systems. 


severed. 








Inability to stage vehicle. 


■RCS Engine lines 

Loss of both 




X 

X 



Close proximity of redundant 


(Sys. A&B) (oxid. 

RCS systems. 








systems. Damage upstream of 


and Fuel) 









isolation valves. Loss of all 
RCS fuel or oxid. Loss of Att. 
Control capability. 



Hypergolic 

X 

X 

X 

X 

X 



Close proximity of oxid. & 



mixing 








fuel lines. Rupture of both 
may result in explosion or 
fire. 



Table 6 . 3 -1 - Simmary Table For r’ragmentatlon Type Failure Effects on the L.M Vc)iicle (f.'ont'd) 


C\ 

I 

*.* 


Tank and Functional 
Concern 


Descent Water Tank 
(Quad //2) 

If the only failure 
was leakage of all 
the HpO in this tank 
it would have no 
effect on crew safe- 
ty at any time in 
the mission. 


jSurro'unding Safety 
[Hazaiu Equipment 


Descent engine 
fuel manifold 
(Quad or DPS 
fuel tank ( -Y) 
or DPS Oxici Tat;k 
(-^). 

DPS Fuel Tank (-Y) 
or DPS Oxid. Tank 

(-Z) 

RCS Engine lines 
(Sys. A&B) 

(03tid.& Fuel) 


Ma^lor Addltl< 
al Concern 


Loss of desceni 
engine cap- 
ability 


Explosive 

Pupt'ire 


Loss of both 
RCS Systems 


Hypergolic 

mixing 


Crlt. Vi:;r:irn Pb- 


L.J2_U 


Remark s 




Explosive rupture of this line 
or tank causes shutdown of 
descent engine. This failure 
causes loss of crew’ in non- 
abort stage zone. 


May cause chain reaction of 
high pressure tank bursts 
and/or cabin rupture. 

Close proximity of redundant 
systems. Damage upstream of 
isolation valves- would cause 
loss of all RCS fuel or oxld, 
loss of attitude control. 


Rupture of both may cauie 
explosion or fire. 


an 


Table 6.3>1 - Summary Table For Fragmentation Type Failure Effects on the LM Vehicle 


( Cont 'd ) 


Tank and Functional 
Concern 

Stir rounding Safety 
Hazard Equipment. 


IS! 

SI 


sv 

m 

SB 





o 


m 

JBi 

Remarks 

Descent GOX Tank 

Descent Water Tank 

Explosive 

H 

■ 

X 

X 

X 



Close proximity to descent 

(LM-10 only) 

No. 2 (Quad #4) 

rupt'ore . 

H 

H 






fuel or oxid tanks which has 

(i^uad #4) 

or GOX Tank (Quad 
4^ 


1 

1 






high TOT equivalent. 

If the only failure 



1 

1 







was leakage of all 

Ascent H-0 Tank 

Explosive 



X 

X 

X 



Close proximity to descent 

GOX in this tank it 

C 

rupture . 








fuel or oxid tanks which has 

would have no effect 




H 






high TOT equivalent. 

on crew safety or 




H 







any time in the mis- 

DPS Fuel (+y) or 

Explosive 

X 


X 

X 

X 



May cause chain reaction of 

Sion or Descent 

DPS Oxld (+Z)Tank( 

1 )rupture 








high pressTire tank bursts and/ 

Water Tank fquad 4) 










or cabin rupture. 


ED Relay Box 

Inadvertent 




X 

X 



See LED-550-175B for complete 


and Wiring or 

cable cutting 








discussion of effects of in- 


Umbilical Cutter 

(Loss of all 








advertent cable cutting. It 



IW power) . 








should be noted that if tne 











ED Relay Box were the cause 











it would require the transfer 











of 3 relays. 


Uhibllical Cutter 

Staging 




X 

X 



Close proximity of redundant 


or ED Nut and 









ED wiring. 


Bolt Combination 











(Quad 











Wiring 

Eletrical 

X 

X 

X 

X 

X 



Eletrical shorts in an oxygen 



Shorts 








environment could result in a 







... 




fire. 












6-26 


Table 6.3-I - Sunanary Table For Fragmentation Type Failure Effects on the LM Vehicle (Cont'd) 




6.U THERMAL BIAHKET PHOTECTIOH 


The loss of thexaal blanket Insulation prior to IM activation an! \ne resultant 
possibility of hl^ solar heat Inputs is of particular concern for the subRy?tems 
listed below: 

o Propulsion Subsystem 
o Beactio* Co' trol Subsystem 
o Envixonses'^i Control Subsystem. 

This section pveee::.ts Ihe results of an investigation of the thexmal problems 
associated with the Ut tanks, if the thexmal Insulation should be damaged or 
removed. Ttemperatuze ewd pressure response of the tanks axe presented with 
comments on the possible cause of insulation damage. 

The Ibllowlng basic areas were analyzed: 

o Detezmlne whlcdi tanks could explode during translunar coast due to loss 
of thexmal shielding 

o Evaluate Ihe potential of losing the thexmal shield in such a way that 
the crew would be unaware of the loss (IM not powered up) from such 
causes as: 

-Propellant spill 
-SIA withdrawal 
-cat PCS la^lngement 
-Launch 

o Evaluate whether hardware or procedures should be changed as a result 
of the above studies. 

6.4.1 Thermal Analysis 

A simplified analysis of each of the IM tanks was perfbxied assuming that the 
blankets and shielding surrounding the tank were missing. Figure 6.4.1, exposing 
each tank to direct solax energy cuid cold deep space. Figure 6.4-2 presents the 
configuration assumed for the APS and DPS propellant tanks. Thble 6.4-1 indicates 
the properties assumed and nodal network used for each case. Rote, the solar 
absorptivity bos never been measured on any of the IM tanks, therefore the values 
were taken from the ll"erature or were Msumed. To obtain the thexmal response of 
a tank, the analysis assumed that the solar vector impinges directly on a tank 
for 4 hours followed by 4 hours of deep space cooling. The IM Thexmal Design 
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6.4.1 cont'd 


Mission limits the vehicle attitude hold periods during translunar coast to 
3 hours. Figures 6.4-3 through 6.4-12 Indicate the temperature and pressure 
response of the tank skin, gas and bulk fluid for each pressure vessel. The 
descent stage vater tank vas excluded from this study because of the presence 
of a 25-layer insulation blnaket mapped aroiind the ^^nk. 

6.4.2 Potential Loss of 'Thermal Shielding 

The themal shielding is made up of many individual blankets that are inter- 
connected vlth "drugstore" maps. Therefore, it is not possible to lose the 
themal protection fran any single area, such as a descent stage quadrant, 
through loss of a single panel. The most likely damage mode, if any, would 
be for a "drugstore" wrap to open. In addition, since the blankets are made 
up of multi-layered material, it is possible to get tears in Ihe outer layers 
without significantly degrading the themal protection. All the themal shield- 
ing is inspected during the pre-launch SIA activ5.tles,and a final inspection 
is made just prior to SIA close-out. Because of this thermal blanket configur- 
ation and these procedures, it is not a realistic possibility that significant 
areas could be lost or degraded during the latmch-and-boost or transposltion- 
and-docklng phases. 

6.4.2. 1 Propellant Spill 

IM thencal blankets would be permanently daneged if propellant (liquid or vapor) 
spilled on them. The blanket failure consists of two modes: 

o The aluminum is removed from the H-film (or mylar) substrate layer, thus 
exposing a transparent hl^ emittance layer 
o Ihe blanket layers adhere to one another and the multilayer radiation 
barrier becomes a single conductive layer which acts as a tiiermal short. 
A failure due to propellant spill in areas with H-film as the external shield 
(descent stage) would be as severe as losing the complete thermal shielding, 
because of the "greenhouse effects" of the transparent blankets.' 

Solar energy would be transmitted directly throu^ the blanket into the tank, 
idiile the remaining blanket would be an Infrared shield to cold deep space. Those 
areas of the LM idiich do not have H-film as the outer blanket would not be 
as severely affected because there would be no "greenhouse effect". 
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6.U.2.2 SIA WithdraiJal 


It 1s geoBetrically impossible to damage the primary descent stage thermal 
blankets during SIA vlthdrawl. However, It Is possible to catch and tear 
Insulation from the landing gear lower outriggers. If the SIA withdrawal angles 
are exceeded. Ihllure of this nature Is not critical for the tanks, but the 
landing gefur would be affected during powered descent (F.U.T. heating); the 
lower outrigger critical temperature is +300°F. 

6. 4. 2. 3 KCS Impingement 


RCS plume impingement Is a design consideration for the thermal blankets. 
Ite present IM design criteria are sunmiarlzed below: 


Engine 

Configuration 

Time-sec 

Duty Cycle 

SM RCS 

CSM/sIVB (Separated) 

5 

100 


(Docked) 

7 

100 

IM RCS 
(Up Firing) 

Staged and Unstaged 

30 

100 

IM RCS 

Staged 

85 

100 

(Down Firing) 

Unstaged 

120 

40 


If the design capability is exceeded, the thermal blanket effectiveness will be 
degraded. Hie degradation, however, will never be as severe as completely losing 
the thermal shielding. 


6. 4. 2. 4 Launch Vibration 

*1110 IM thermal shielding is not critical for the launch shock and vibration loads. 
Hils was demonstrated during the L1A-3 launch test of Quad I. 

6.4.2.^ Explosion 

The thermal shielding cou..d be damaged from a tank lhj.lure or rupture of the descent 
stage GOX tank burst disc. If this occurred, the Internal components would be 
exposs^ to space and possibly direct sunlight. Ihls represents the most critical 
failure mode of llie tl.ermal blankets, and could lead to solar heating as discussed 
In Bars. 6.4.1. 

6.4. 2.6 Thermal Shielding Vents 

The table be] >w sumnarlzei tia IM venting configuration for the ascent and descent 


6-29 



6.U.2.6 cont'd 


stages. Ihe AP( limit) is the pressiire differential design point for boost 
venting, €ind the A P( ultimate) is the pressure differential that will cause 
insulation damage. 


im-8 d/s 


Total Mb. of Vents 8 

Available Vent Area - sq. in. l60 

A P (limit) - psia .02 

A P (ultimate) - psia .03 

Vent Area (limit) - psia ll4 

Vent Area (ultimate) - sq. in. 90 

Mb. of Vents Ihat Must Be Lost 
To Reach Limit 3 

Mb. Of Vents That Must Be Lost 
To Damage Insulation U 


IM-10 D/s 

TM-8 & -10 A/s 

3 large & 4 small 

22 

154 

78.5 

.02 

.0278 

.03 

.0415 

105 

69.5 

82.5 

54 

1 large or 2 small 

3 

2 large or 3 small 

7 


Ihe IM-8 and IM-10 venting requirements for the descent stage are both presented 
because of the IM-10 design modifications. Expressed as precentages, the folloving 
vent areas must be inoperative before insulation damage occurs: 
o IM-8 Descent Stage - 37.5?^ of total vent area 
o IM-10 Descent Stage - 3*^^t of total vent area 
o IM-8 & -10 Ascent Stage - 2T^ of total vent area. 


6-4.3 Tank Fractiire Mechanics 


Figures 6.4-13 throu^ 6.4-21 show the degradation in pressure capability as 
tanks are heated after thermal blapF^t loss. Each curve is a stress/pressure 
versus temperature plot shoving material strength degradation. A 1^ fhctor- . 
of-safety curve is also presented. Ihis Ihctor-of-safety curve shows the 
; tress/pressure not to be exceeded by design when pressurizing the tank. Super- 
imposed on this graph is a plot of the Increase in pressure that wuald occur 
during a 4~hour attitude hold with the thermal blanket degraded as described 
in Bara. 6.4.1. It should be noted that for a given propellant tank the hipest 
pressure was used (oxidizer or fuel). Table 6.4->2 sxmmBrlzes those attitude- 
hold times, less than 4 hr, required to Increase the stress/pressure in the IM 
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pressure vessels tram NOP to MDOP (Actor of saftty « 1.3) and NOP to design 
burst pressure (Actor of safety * l.O). 

6.4. U Potentle'*. Changes 

Die following procedural and hardware changes vould reduce the criticality of 
the loss or degradation of the IM thenaal shielding: 

o Visually Inspect the IK during transposition and docking to ensure 
that all IK thexmal shielding is in place 
o Monitor IK telemetry during translunar coast; presently no IK 
measurements are available during unmanned mission ptoses 
o Measure solar absorptivlly of all pressure vessels to acciirately 
predict the thexnel response of the tanks 
o Insulate all tenks with a layer of H-fllm; this will significantly 
reduce the amount of solar energy that can be absorbed by each tank 
in direct sunlight; a single layer will not adversely %fAct the 
vehicle liiermal network. 
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TABLE 6.4-1 THERMAL PRO'^ERTIFS AND ASSUMPTIONS 


TANK 

TANK 

MATERIAL 

TANK 

BIAhJETEl 

(INCHES) 

TANK 

WEIGHT 

(LBS) 

FV.IID 

WEUHT 

(LAS) 

“'s 

‘^th 

VIEW 

TO 

SPACE 

VIEW 

TO 

CTRUC 

NODAL 

NETWORK 

D/S Ambient He 

Titanium 

IS 

10 

1 

.6 

.12 

.2 

< 

.8 

TR Tank Space 

^ 

Same as D/S He Tank 

D/S ECS Oxygen 

Steel -D6AC 

(Cadmium pla^'etli painted 
with black epoxy) 

21.25 

59 

48 

.85 

*.85 

.2 

.8 

D/S SHe 

(outer shell temperature 
only) 

Titanium 

52.9 

74.3 


.6 

.12 

.2 

. 8 

Same as D/S He Tank 

r — 

A/S Water 

(D/S Mater Tank is com- 
pletely insulated see text) 

Aluminum 

14.6 

5.2 

42 

.86 

.86 

.2 

.8 

N 

WaLzer 

A/S APS He 

Titanium 

22.48 

55.6 

6.5 

.8 

*,4 

.2 

.8 

Same as D/S He Tank 

A/S RCS Propellant 

Titanium 

12. S 
(38"high 

12 

) 

204 

.7 

».1S 

.2 

.8 

Same as A/S H2O Tank 

A/S RCS He 

Titanium 

12.37 

9 

1 

.6 

*.12 

.2 

.8 

Same As D/S Anb.He Tk. 

A/s GOX 

Inconel 

11.8 

5 

2.4 

.67 

.32 

.2 

.8 

Same as D/S .Amb.He Tk. 

DPS Propellant (Fuel) 

(oxidizer) 

Titanium 

51.25 

Hi. 5 

3575 

5700 

.8 

.2 

0 

1.0 

See Figure 6.4-2 

APS Propellant (Fuel) 

(oxidi zer) 

TitJ.'iium 

49,38 

75.2 

1960 

3150 

.8 

.2 

.5 

.5 

See Figure 6.4-2 


* Mea<:ure'j valLjs 
o Iterated nodes 
O Boundary nodes 


Table 6.4-2 


Tank 

Pressure Rise ilsies fVon Solar Heating 

T1b» (Hrs.) From 
NOP to MDOP (FS=1.5) 

Time (Hrs.) From 
NOP to Burst (FS=1) 

d/s Helium 

.38 

?.l 

d/s GOX 

>4 

> 4 

a/s HgO 

>4 

> 4 

a/s He 

1.7 

>4 

RCS Ox 


>4 

RCS He 

.52 

>4 

a/s GOX 

> 4 

> 4 

d/s Fuel 

> 4 

>4 

a/s Fuel 

>4 

>4 
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Fl«:ure 6.U.2 


DPS FROFELIAST TIUIK ‘KERHAL MODEL 



APS FROFGLIAirr 'EftlOC THERMAL MODEL 



VIEW FACTOR TO SPACE = .5 
VIEW FACTOR TO IK STRITCIDRE » .5 
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TIME /t-/ HOURS 


TEMPERATURE 

/i/ 


0 


F 



TIME A/ hours 

FIGURE 6.4-3. DPS HELIUM TANK 


PRESSURE 




TIME~HOURS 

FIGURE 6.4-4. DESCENT 0, TANK 


6 - 3 ' 



FIGURE 6.4-5. SUPERCRITICAL HELIUM TANK 
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TIMS'- KRS 

FIGURE 6.4-6. ECS ASCENT H,0 TANK 




TEMPERATURE 

Op 



FIGURE 6.4-7. APS HELIUM TANK 
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TIME -t_ HOURS 



FIGURE 6.4-10. ASCENT 0, TANK 


3 



6 . 


■UEU 



TIMEMHOURS 



FIGURE 6.4-12. APS PROPELLANT TANKS 


6-45 






tnr9 


FTU 

KSI/I^SI 



FIGURE 6.4-14. D6 AC, DESCENT STAGE GOX TANK 


KSI/PSI 



FIGURE 6.4-15. 6061-T6, ASCENT STAGE H„0 TANK 


FTU 

KSI/PS] 

140/4930 

120/4225 

100/3520 

80/2820 

60/2160 

40/1410 

20/704 


0 
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200 300 
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FIGURE 6.4-18. TI 6AI-4V STA, RCS HELIUM TANK 



-J 

500 
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FIGURE 6.4-20. TI 6AI-4V STA, DESCENT STAGE FUEL TANK 
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FTU 
KSI/PSI 

140/363.01- 
I20/3II.0 - 


100/259. Ol- 
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60/155.8 




40/103.81- 


20/51 . 8 L 1 
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FIGURE 6.4-21. 


200 300 

TEMPERATURE-^ Op 

TI 6AI-4V STA, ASCENT STAGE FUEL TANK 



7 SUMMARy AND CONCLUSIONS 

The objectives of this study were to: 

o Identify all possible failure modes in the LM that could lead 
. to rupture of any pressure vessel 
o Determine the liloalihood of such a failure 
o Evaluate the damage potential of such a failure, assuming it 
did occur 

Emphasis was placed on the failure mode that is thought to have occurred 
in the SM on the Apollo I 3 misslonj that is, the presence of an ignition 
source (e.g., electrical short circuit) near a nonmetallic material in 
an environment that could support combustion. This could then result in 
a pressure vessel failure (either explosive or non-explosive). 

Principal conclusions of the study are as follows: 

a. None of the electrical components investigated constitute ignition 
sources in their normal operating modes. Only the PQGS normally exposes 
electrical devices directly to the pressurized fluid. After thorou^ 
analysis it is concluded that adequate circuit protection is provided to 
preclude ignition. Tests should be conducted to verify the analysis. 

b. The study also included an investigation of the possible effects 
of a single point failure that could expose internal nonmetallic material 
and electrical ccxtiponents to the fluid environment. 

With respect to materials compatibility, it is concluded that 
materials in all components, operating in their normal modes, are 
compatible with their respective fluid environments. For the single 
poi^.t failure modes, there are instances where internal structural 
failures can expose non-compatible materials to the fluid environment. 

The primary source of such an occurrence is in transducers. However, 
records have shown that such a failure mode has never occurred on the LM 
program in any of the transducers used in the oxygen and propellant systems. 
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In the 0^ system mechanical component failures can expose materials to 
environments for which they are untested. Structural failures must occur 
before the circuits and materials can be exposed to the fluids. The 
theoretical factor of safety for these devices is five or greater. They 
are leak tested at 1.5 times the maximum design operating pressure which 
is more severe than any other pressure containers. The single point 
failures not only exposed non-compatible materials, but also exposed them 
in areas that contained electrical components. A short circuit could then 
be theorized to represent a potential Ignition source. Hoirever, analysis 
indicates all of these electrical circuits have adequate circuit protection 
devices that will discontinue electrical power before ignition can occur. 
Tests should be conducted to verify this conclusion. 

c. Based on a literature search on the subjects of the capability 
of oxidizer or fuel to support combustion of the various nonmetallic 
materials at elevated temperatures, and impact sensitivity of CNR, EPR, 
and Butyl rubber in oxidizer or fuel, it is concluded that no substantive 
data are available on either subject. Neither combustion nor impact 
problems have been encountered in the past. Tests should be conducted to 
resolve these questions. 

d. If ignition and combustion in such devices could occur, the 
combustion of nonmetal3.ic materials exposed by a single-point failure 
would increase the local pressure sufficiently to rupture the individual 
component. This assumes that the initial single-point failure leak path 
is not large enough to allow expansion into the total system, Sven if 
the pressure increase could expand into the total system, the resultant 
system pressure could be in excess of burst disc level. 

e. Based on a review of the normal operating modes of the various 
high-pressure systems, it is concluded that the LM pressure vessels are 
protected with adequate redundancy against failures of such mechanical 
components as pressure regulators, check valves, relief valves and burst 
discs. In addition, all of the high pressure systems in the IM are 
designed with adequate structural factors of safety. 
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f. Since there are no electrical compments In the Uf piressure 
vessel systems that intentionally, or can accidently, increase tank 
pressures significantly, the only realistic failure mechanism eould appear 
to be the loss or degradation of thermal blankets. Such a failure could 
expose the tanks to direct solar heating. However, analysis has shown 

that relatively short periods of attitude hold are required (e.g. , §-2 hours) 
to obtain a hazardous pressure and t«aperature increase in the gaseous He 
tanks. ALl other tanks remain within design limits for attitude hold 
periods up to U hours. Wrapping of the gaseous He tanks with H-fllm would 
reduce the absorption of solar energy such that attitude holds of at least 
^ hours would be permlssable. If the IM were manned, then such a failiure 
would be detected and corrective actioo could be taken. Ihe period of most 
ccmcem is translunar coast, when the IM is unmanned and unmc»iitored. 

However, a passive thermal control mode (slow rotation) is normally 
employed during this mission phase idiich results in alternate Intervals 
of solar heating and deep space cooling. Extended attitude holds are 
possible during this phase. 'Bie IM specification requires the 
vehicle to be capable of continuous attitude holds up to 3 hours duration. 

Die probability of undetected thermal blanket loss has been investi- 
gated, resulting in the concluslcxi that loss or degradation of significant 
blanket area is not a realistic possibility in view of the fastening 
techniques and forces available durin g the various mission phases (e.g., 
launch and boost, SLA deployment and ejection). 

g. An orygen leak <xi IM exterior materials is not considered to be a 
problem, since the insulation blankets and aicrOTieteoroid shield will <mly 
maintain a pressure of less than 0.1 psl without rupturing. Combustion 
would not be supported at such a low x>ressure. 

h. Ihe entire IM has not been designed to be compatible with 

A-50. If an oxidizer or A-50 tank were to leak or spill its cwitents, many 
non- compatible materials would be exposed. !Bie IM is leedc checked before 
a mission to an extremely tight specification; therefore, tankage lesdcs 
should not exist for a normal mlsBloa. 
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i. “nie study of H® spillage concluded that only aluminuc of the 
metallic materials has shovn a tendency to corrode. Ihe space envirc»3Joent 
should preclude even the aluininum reaction, because of rapid vaporication 
of the water frcm the electrolyte and its sid)sequent freezing. One 
possible area of concern is the fracture mechaiiics stress corrosion effects 
of a IQ® spill cm a highly stressed pressure vessel, such as a gaseous 
helium bottle. No infcmnatlon is available on this subject. Addition of 
an H-filffi wrap around the tank would preclude this possibility. 

IS)H cannot be spilled from any of the M batteries even if the 
case vents do not function properly, unless there is an accompanying 
electrical failure. *Hie IM batteries all have vent valves to relieve 
product gases. If the vent valves were to fail, the primary batteries 
would relieve through the gasket cover wiiereas the pyro battery cases 
would s^it. In either case there is little possibility of an eacplosive 
battery case rupture. Ihe primary battery vent valves are operationally 
checked just prior to vehicle installation. A similar check should be 
made cm the pyro batteries. There are no data on the burst characteristics 
of the batteries. These data should be obtained. 

The Apollo 13 anomalies associated with the descent batteries 
are being imestigated and reported through normal postfli^t procedures - 
These anomalies are unresolved at this time. 

k. It is impractical to protect the I?? against a framentary failure. 





8 REC(M>lSn)IDATIONS 


Based on the results of the IK systems evaluation summarized in Section 2 
through 6 and the conclusions presented in Section J, the following 
recommendaticms are submitted for consideration; 

o Additional study should be given to wrapping of the gaseous 
helium tanks with a single layer of H-film to preclude KOH 
attack and reduce the effects of direct solar heating 
o Rie pyro battery activation procedure should be modified to 
include vent valve checkout 
o Burst tests of all batteries should be conducted 
o Hie requirement for the APS PLD's should be investigated further, 
and the units should be remo\’ed or inerted if found to be 
unnecessary 

o Additional materials testing should be conducted in those areas 
where a general lack of engineering data has been discovered. 

Specifically, the following tests should be conducted: 

a. GOX impact tests of all IK Og system impact applications 
including ccMsideration of single point failures. 

b. Ccmbustion and ignition tests of appropriate IK materials 

in A-50 to verify analytical conclusions of this study. 

c. impact tests of all nonmetallic materials in IK and 

A-50 impact applications.. 

d. Conduct present standard 0^ flash and fire test at 
elevated pressures to verify the applicability of existing 
ambient data. 

o Present materials controls should be broadened to assure MSC 
surveillance of all materials requirements and applications in 
all areas of the spacecraft. 

o Intentional fault tests should be conducted in all spacecraft 

components where combustion is xjssible to assure adequate design 
margins and circuit protection. 
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